ibm engineering insights, ibm engineering lifecycle management, ibm engineering requirements quality assistant on-premises +3 lainnya
CVSS 7.1 · High EPSS 1,4%
Kerentanan Improper Restriction of XML External Entity Reference pada ibm engineering insights, ibm engineering lifecycle management +4 lainnya. Skor CVSS 3.1 7.1 (High) menurut NVD.
IBM Jazz Foundation Products are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 198059.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| ibm | engineering insights | Versi 7.0 |
| ibm | engineering insights | Versi 7.0.1 |
| ibm | engineering insights | Versi 7.0.2 |
| ibm | engineering lifecycle management | Versi 7.0 |
| ibm | engineering requirements quality assistant on-premises | Semua versi |
| ibm | engineering workflow management | Versi 7.0.0 |
| ibm | engineering workflow management | Versi 7.0.1 |
| ibm | engineering workflow management | Versi 7.0.2 |
| ibm | rational engineering lifecycle manager | Versi 6.0.2 |
| ibm | rational engineering lifecycle manager | Versi 6.0.6 |
| ibm | rational engineering lifecycle manager | Versi 6.0.6.1 |
| ibm | rational team concert | Versi 6.0.6 |
| ibm | rational team concert | Versi 6.0.6.1 |
| ibm | rational team concert | Versi 6.0.6.2 |