Jazz Foundation
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:jazz_foundation:7.0.3:ifix016:*:*:*:*:*:*
part: a version: 7.0.3 update: ifix016
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Jazz Foundation (f5eca551-80fe-5cc4-9da5-b3c7b57d7224) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-36157 |
vulnerable | 2026-06-08 07:21:01.318593 |
IBM Engineering Lifecycle Management incorrect authorization
CRITICAL (9.8)
IBM Jazz Foundation 7.0.2 to 7.0.2 iFix035, 7.0.3 to 7.0.3 iFix018, and 7.1.0 to 7.1.0 iFix004 could allow an unauthenticated remote attacker to update server property files that would allow them to perform unauthorized actions.
Published: 2025-08-24T01:14:41.359Z
Updated: 2026-02-26T17:48:14.120Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-1826 |
vulnerable | 2026-06-08 07:08:38.254192 |
IBM Jazz Foundation cross-site scripting
MEDIUM (5.4)
IBM Engineering Requirements Management DOORS Next (IBM Jazz Foundation 7.0.2 to 7.0.2 iFix034, 7.0.3 to 7.0.3 iFix016, and 7.1.0 to 7.1.0 iFix004) is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users on the host network to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-10-07T17:50:00.512Z
Updated: 2025-10-14T18:24:39.313Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15395 |
vulnerable | 2026-06-08 07:06:36.192879 |
IBM Jazz Foundation access control violation
MEDIUM (4.3)
IBM Jazz Foundation 7.0.3 through 7.0.3 iFix019 and 7.1.0 through 7.1.0 iFix005 is vulnerable to access control violations that allows the users to view or access/perform actions beyond their expected capability.
Published: 2026-02-02T15:10:56.983Z
Updated: 2026-02-02T16:45:31.338Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.