CVE-2021-20447: IBM Jazz Foundation Products are vulnerable to cross-site scripting. This v

IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended fun

Status

Published

2021-03-30

Updated

2024-09-16

Assigning organization

ibm

Description

IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 196623.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM Rational Engineering Lifecycle Manager

6.0.2affected
6.0.6affected
6.0.6.1affected

IBM Rational Team Concert

6.0.2affected
6.0.6affected
6.0.6.1affected

IBM Engineering Workflow Management

7.0affected
7.0.1affected
7.0.2affected

IBM Engineering Lifecycle Optimization

7.0affected
7.0.1affected
7.0.2affected