CVE-2020-4445 - IBM Jazz Team Server based Applications are vulnerable to cross-site scripting

Back Back to CVE browser

MEDIUM

IBM Jazz Team Server based Applications are vulnerable to cross-site scripting

Published Sep 2, 2020

5.4

MEDIUM

CVSS 3.1

EPSS 0.56%

Description

IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 181122.

Affected products

Vendor IBM Product Engineering Workflow Management Default
unknown
Affected
- 7.0
Vendor IBM Product Rational DOORS Next Generation Default
unknown
Affected
- 6.0.2
- 6.0.6
- 6.0.6.1
- 7.0
Vendor IBM Product Rational Quality Manager Default
unknown
Affected
- 6.0.2
- 6.0.6
- 6.0.6.1
Vendor IBM Product Rational Rhapsody Design Manager Default
unknown
Affected
- 6.0.2
- 6.0.6
- 6.0.6.1
- 7.0
Vendor IBM Product Rational Team Concert Default
unknown
Affected
- 6.0.2
- 6.0.6
- 6.0.6.1
- 7.0

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
IBM	Engineering Workflow Management	unknown	Affected 7.0
IBM	Rational DOORS Next Generation	unknown	Affected 6.0.2 6.0.6 6.0.6.1 7.0
IBM	Rational Quality Manager	unknown	Affected 6.0.2 6.0.6 6.0.6.1
IBM	Rational Rhapsody Design Manager	unknown	Affected 6.0.2 6.0.6 6.0.6.1 7.0
IBM	Rational Team Concert	unknown	Affected 6.0.2 6.0.6 6.0.6.1 7.0

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-25692
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/181122
vdb-entryx_refsource_XFVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/6325343
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-25692		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/181122		vdb-entryx_refsource_XFVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/6325343		x_refsource_CONFIRMVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner ibm

Published Sep 2, 2020

Updated Sep 17, 2024

Reserved Dec 30, 2019

Link CVE-2020-4445

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-4445

Red Hat

No data

ENISA EUVD

Assigner ibm

Published Sep 2, 2020

Updated Sep 17, 2024

Link EUVD-2020-25692

GitHub

No data