IBM Jazz Foundation 7.0.2
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:jazz_foundation:7.0.2:-:*:*:*:*:*:*
part: a version: 7.0.2 update: -
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Jazz Foundation (f5eca551-80fe-5cc4-9da5-b3c7b57d7224) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-36157 |
vulnerable | 2026-06-08 07:21:01.275391 |
IBM Engineering Lifecycle Management incorrect authorization
CRITICAL (9.8)
IBM Jazz Foundation 7.0.2 to 7.0.2 iFix035, 7.0.3 to 7.0.3 iFix018, and 7.1.0 to 7.1.0 iFix004 could allow an unauthenticated remote attacker to update server property files that would allow them to perform unauthorized actions.
Published: 2025-08-24T01:14:41.359Z
Updated: 2026-02-26T17:48:14.120Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-25048 |
vulnerable | 2026-06-08 07:12:50.552333 |
IBM Jazz Foundation path traversal
MEDIUM (6.5)
IBM Jazz Foundation 7.0.2 through 7.0.2 iFix033, 7.0.3 through 7.0.3 iFix012, and 7.1.0 through 7.1.0 iFix002 could allow an authenticated user to upload files to the system due to improper neutralization of sequences that can resolve to a restricted directory.
Published: 2025-09-04T15:06:15.076Z
Updated: 2025-09-04T15:16:08.257Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-1826 |
vulnerable | 2026-06-08 07:08:38.257176 |
IBM Jazz Foundation cross-site scripting
MEDIUM (5.4)
IBM Engineering Requirements Management DOORS Next (IBM Jazz Foundation 7.0.2 to 7.0.2 iFix034, 7.0.3 to 7.0.3 iFix016, and 7.1.0 to 7.1.0 iFix004) is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users on the host network to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-10-07T17:50:00.512Z
Updated: 2025-10-14T18:24:39.313Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5591 |
vulnerable | 2026-06-08 06:56:16.632992 |
IBM Jazz Foundation information disclosure
MEDIUM (4.3)
IBM Jazz Foundation 7.0.2, 7.0.3, and 7.1.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.
Published: 2025-01-03T14:33:51.872Z
Updated: 2025-01-03T17:53:10.817Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-43184 |
vulnerable | 2026-06-08 06:45:49.764675 |
IBM Jazz Foundation cross-site scripting
MEDIUM (6.1)
IBM Jazz Foundation 7.0.2 through 7.0.2 iFix033, 7.0.3 through 7.0.3 iFix012, and 7.1.0 through 7.1.0 iFix002 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-09-04T15:04:57.324Z
Updated: 2025-09-04T17:39:41.359Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41780 |
vulnerable | 2026-06-08 06:43:55.170569 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.