Jazz Foundation
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:jazz_foundation:7.0.2:ifix034:*:*:*:*:*:*
part: a version: 7.0.2 update: ifix034
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Jazz Foundation (f5eca551-80fe-5cc4-9da5-b3c7b57d7224) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-36157 |
vulnerable | 2026-06-08 07:21:01.305353 |
IBM Engineering Lifecycle Management incorrect authorization
CRITICAL (9.8)
IBM Jazz Foundation 7.0.2 to 7.0.2 iFix035, 7.0.3 to 7.0.3 iFix018, and 7.1.0 to 7.1.0 iFix004 could allow an unauthenticated remote attacker to update server property files that would allow them to perform unauthorized actions.
Published: 2025-08-24T01:14:41.359Z
Updated: 2026-02-26T17:48:14.120Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-1826 |
vulnerable | 2026-06-08 07:08:38.251944 |
IBM Jazz Foundation cross-site scripting
MEDIUM (5.4)
IBM Engineering Requirements Management DOORS Next (IBM Jazz Foundation 7.0.2 to 7.0.2 iFix034, 7.0.3 to 7.0.3 iFix016, and 7.1.0 to 7.1.0 iFix004) is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users on the host network to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-10-07T17:50:00.512Z
Updated: 2025-10-14T18:24:39.313Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.