Ibm Jazz Foundation vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Ibm Jazz Foundation: 2 record(s), with affected versions and fixes.cpe:2.3:a:ibm:jazz_foundation
CVE-2025-15395
Medium · 5.4
CWE-863 Feb 2, 2026
IBM Jazz Foundation access control violation
IBM Jazz Foundation 7.0.3 through 7.0.3 iFix019 and 7.1.0 through 7.1.0 iFix005 is vulnerable to access control violations that allows the users to view or access/perform actions beyond their expected capability.
CVE-2025-1826
Medium · 5.4
CWE-79 Oct 7, 2025
IBM Jazz Foundation cross-site scripting
IBM Engineering Requirements Management DOORS Next (IBM Jazz Foundation 7.0.2 to 7.0.2 iFix034, 7.0.3 to 7.0.3 iFix016, and 7.1.0 to 7.1.0 iFix004) is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users on the host network to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.