Dassault Systèmes Tuleap Enterprise Edition vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Dassault Systèmes Tuleap Enterprise Edition: 9 record(s), with affected versions and fixes.
CVE-2026-105412
High · 7.1
CWE-89 Oct 12, 2026
SQL Injection vulnerability affecting Tuleap Enterprise Edition 17.5
An SQL Injection vulnerability affecting Tuleap Enterprise Edition 17.5 could allow an attacker to have read access the Tuleap database.
CVE-2026-105411
High · 8.1
CWE-639 Oct 12, 2026
Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5
An Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker with tracker administration rights on one tracker to update or delete fields of all the trackers on the instance.
CVE-2026-105410
High · 8.7
CWE-79 Oct 12, 2026
Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5
A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary script code in user's browser session.
CVE-2026-105409
High · 8.7
CWE-79 Oct 12, 2026
Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5
A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary script code in user's browser session.
CVE-2026-105408
High · 8.7
CWE-79 Oct 12, 2026
Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5
A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary script code in user's browser session.
CVE-2026-105407
High · 8.8
CWE-78 Oct 12, 2026
OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5
An OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary commands on the server.
CVE-2026-84285
High · 8.8
CWE-78 Sep 21, 2026
OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.3 through 17.5
An OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.3 through 17.5 could allow an attacker to execute arbitrary commands on the server.
CVE-2026-19851
High · 7.7
CWE-1393 Aug 25, 2026
Use of Default Password vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5
A Use of Default Password vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to gain access to user accounts created during XML import.
CVE-2026-14165
High · 7.5
CWE-639 Jul 13, 2026
Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5
An Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to access data of other users without authorization.