Vulnerabilidades do Ibm Jazz Foundation

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Ibm Jazz Foundation: 2 registro(s), com versões afetadas e correções.
cpe:2.3:a:ibm:jazz_foundation

CVE-2025-15395 Média · 5.4 CWE-863 02/02/2026

IBM Jazz Foundation access control violation

IBM Jazz Foundation 7.0.3 through 7.0.3 iFix019 and 7.1.0 through 7.1.0 iFix005 is vulnerable to access control violations that allows the users to view or access/perform actions beyond their expected capability.

CVE-2025-1826 Média · 5.4 CWE-79 07/10/2025

IBM Jazz Foundation cross-site scripting

IBM Engineering Requirements Management DOORS Next (IBM Jazz Foundation 7.0.2 to 7.0.2 iFix034, 7.0.3 to 7.0.3 iFix016, and 7.1.0 to 7.1.0 iFix004) is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users on the host network to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.