Engineering insights

This hub aggregates every CVE we track for Engineering insights, a product in the enterprise software space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Engineering insights.

• CVE-2024-39727IBM Engineering Lifecycle Optimization - Engineering Insights tabnabbing6.1Dec 25, 2024
• CVE-2024-39725IBM Engineering Lifecycle Optimization - Engineering Insights information disclosure5.3Dec 25, 2024
• CVE-2024-39726IBM Engineering Insights XML external entity injection8.2Nov 15, 2024
• CVE-2021-20519IBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality poten...5.4Apr 12, 2021
• CVE-2020-4965IBM Jazz Team Server products use weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 192422.7.5Apr 12, 2021
• CVE-2020-4920IBM Jazz Team Server products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionalit...5.4Apr 12, 2021
• CVE-2020-4964IBM Jazz Team Server products contain an undisclosed vulnerability that could allow an authenticated user to present a customized message on the application which could be used to phish other users...4.3Apr 12, 2021
• CVE-2021-20520IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potent...5.4Mar 30, 2021
• CVE-2021-20518IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potent...5.4Mar 30, 2021
• CVE-2021-20506IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potent...5.4Mar 30, 2021
• CVE-2021-20504IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potent...5.4Mar 30, 2021
• CVE-2021-20503IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potent...5.4Mar 30, 2021
• CVE-2021-20502IBM Jazz Foundation Products are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive informa...7.1Mar 30, 2021
• CVE-2021-20447IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potent...5.4Mar 30, 2021
• CVE-2021-20352IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potent...5.4Mar 30, 2021