Ibm Jazz Foundation 7.0.3 interim fix 002
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:jazz_foundation:7.0.3:ifix002:*:*:*:*:*:*
part: a version: 7.0.3 update: ifix002
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Jazz Foundation (f5eca551-80fe-5cc4-9da5-b3c7b57d7224) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-36157 |
vulnerable | 2026-06-08 07:21:01.307773 |
IBM Engineering Lifecycle Management incorrect authorization
CRITICAL (9.8)
IBM Jazz Foundation 7.0.2 to 7.0.2 iFix035, 7.0.3 to 7.0.3 iFix018, and 7.1.0 to 7.1.0 iFix004 could allow an unauthenticated remote attacker to update server property files that would allow them to perform unauthorized actions.
Published: 2025-08-24T01:14:41.359Z
Updated: 2026-02-26T17:48:14.120Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-25048 |
vulnerable | 2026-06-08 07:12:50.576574 |
IBM Jazz Foundation path traversal
MEDIUM (6.5)
IBM Jazz Foundation 7.0.2 through 7.0.2 iFix033, 7.0.3 through 7.0.3 iFix012, and 7.1.0 through 7.1.0 iFix002 could allow an authenticated user to upload files to the system due to improper neutralization of sequences that can resolve to a restricted directory.
Published: 2025-09-04T15:06:15.076Z
Updated: 2025-09-04T15:16:08.257Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-1826 |
vulnerable | 2026-06-08 07:08:38.288335 |
IBM Jazz Foundation cross-site scripting
MEDIUM (5.4)
IBM Engineering Requirements Management DOORS Next (IBM Jazz Foundation 7.0.2 to 7.0.2 iFix034, 7.0.3 to 7.0.3 iFix016, and 7.1.0 to 7.1.0 iFix004) is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users on the host network to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-10-07T17:50:00.512Z
Updated: 2025-10-14T18:24:39.313Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15395 |
vulnerable | 2026-06-08 07:06:36.179380 |
IBM Jazz Foundation access control violation
MEDIUM (4.3)
IBM Jazz Foundation 7.0.3 through 7.0.3 iFix019 and 7.1.0 through 7.1.0 iFix005 is vulnerable to access control violations that allows the users to view or access/perform actions beyond their expected capability.
Published: 2026-02-02T15:10:56.983Z
Updated: 2026-02-02T16:45:31.338Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-43184 |
vulnerable | 2026-06-08 06:45:49.789356 |
IBM Jazz Foundation cross-site scripting
MEDIUM (6.1)
IBM Jazz Foundation 7.0.2 through 7.0.2 iFix033, 7.0.3 through 7.0.3 iFix012, and 7.1.0 through 7.1.0 iFix002 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-09-04T15:04:57.324Z
Updated: 2025-09-04T17:39:41.359Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.