Vulnerabilidades do Dassault Systèmes Tuleap Enterprise Edition
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Dassault Systèmes Tuleap Enterprise Edition: 9 registro(s), com versões afetadas e correções.
CVE-2026-105412
Alta · 7.1
CWE-89 12/10/2026
SQL Injection vulnerability affecting Tuleap Enterprise Edition 17.5
An SQL Injection vulnerability affecting Tuleap Enterprise Edition 17.5 could allow an attacker to have read access the Tuleap database.
CVE-2026-105411
Alta · 8.1
CWE-639 12/10/2026
Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5
An Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker with tracker administration rights on one tracker to update or delete fields of all the trackers on the instance.
CVE-2026-105410
Alta · 8.7
CWE-79 12/10/2026
Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5
A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary script code in user's browser session.
CVE-2026-105409
Alta · 8.7
CWE-79 12/10/2026
Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5
A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary script code in user's browser session.
CVE-2026-105408
Alta · 8.7
CWE-79 12/10/2026
Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5
A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary script code in user's browser session.
CVE-2026-105407
Alta · 8.8
CWE-78 12/10/2026
OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5
An OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary commands on the server.
CVE-2026-84285
Alta · 8.8
CWE-78 21/09/2026
OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.3 through 17.5
An OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.3 through 17.5 could allow an attacker to execute arbitrary commands on the server.
CVE-2026-19851
Alta · 7.7
CWE-1393 25/08/2026
Use of Default Password vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5
A Use of Default Password vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to gain access to user accounts created during XML import.
CVE-2026-14165
Alta · 7.5
CWE-639 13/07/2026
Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5
An Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to access data of other users without authorization.