Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:engineering_workflow_management:7.0.2:*:*:*:*:*:*:*

part: a version: 7.0.2 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductEngineering Workflow Management (61fe9f45-217e-5ae2-ad35-664b8f043de0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-51454 vulnerable 2026-07-28 22:58:52.865693 IBM Engineering Lifecycle Management - Engineering Workflow Management is impacted by vulnerabilities Host Header Injection observed
MEDIUM (6.5)
IBM Engineering Workflow Management 7.0.2 through 7.0.2 Interim Fix 035, 7.0.3 through 7.0.3 Interim Fix 017, and 7.1 through 7.1 Interim Fix 004 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking.
Published: 2026-06-22T14:33:55.090Z
Updated: 2026-06-22T17:50:32.985Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28793 vulnerable 2026-06-08 06:33:27.337850 IBM Engineering Workflow Management cross-site scripting
MEDIUM (4.9)
IBM Engineering Workflow Management 7.0.2 and 7.0.3 is vulnerable to stored cross-site scripting. Under certain configurations, this vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 286830.
Published: 2024-05-28T12:00:47.899Z
Updated: 2025-02-13T17:47:31.719Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29844 vulnerable 2026-06-08 05:31:27.095415 Details available
MEDIUM (5.4)
IBM Jazz Team Server products is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.
Published: 2021-10-27T16:00:31.302Z
Updated: 2024-09-16T17:59:19.776Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29786 vulnerable 2026-06-08 05:31:27.018547 Details available
MEDIUM (6.5)
IBM Jazz Team Server products stores user credentials in clear text which can be read by an authenticated user. IBM X-Force ID: 203172.
Published: 2021-10-27T16:00:29.665Z
Updated: 2024-09-16T19:31:21.815Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29774 vulnerable 2026-06-08 05:31:26.996635 Details available
HIGH (7.5)
IBM Jazz Team Server products could allow an authenticated user to obtain elevated privileges under certain configurations. IBM X-Force ID: 203025.
Published: 2021-10-27T16:00:28.033Z
Updated: 2024-09-17T02:10:50.993Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29701 vulnerable 2026-06-08 05:31:26.824966 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29673 vulnerable 2026-06-08 05:31:26.762961 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20520 vulnerable 2026-06-08 05:29:09.410531 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20519 vulnerable 2026-06-08 05:29:09.404041 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20518 vulnerable 2026-06-08 05:29:09.396175 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20507 vulnerable 2026-06-08 05:29:09.383258 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20506 vulnerable 2026-06-08 05:29:09.377558 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20504 vulnerable 2026-06-08 05:29:09.367580 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20503 vulnerable 2026-06-08 05:29:09.366849 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20502 vulnerable 2026-06-08 05:29:09.365961 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20447 vulnerable 2026-06-08 05:29:09.262996 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20357 vulnerable 2026-06-08 05:29:09.153655 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20352 vulnerable 2026-06-08 05:29:09.130372 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20351 vulnerable 2026-06-08 05:29:09.119826 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20350 vulnerable 2026-06-08 05:29:09.118813 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20340 vulnerable 2026-06-08 05:29:09.085907 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5031 vulnerable 2026-06-08 05:26:41.407163 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5004 vulnerable 2026-06-08 05:26:41.367954 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4975 vulnerable 2026-06-08 05:26:41.272085 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4974 vulnerable 2026-06-08 05:26:41.262791 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4965 vulnerable 2026-06-08 05:26:41.239768 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4964 vulnerable 2026-06-08 05:26:41.236588 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4920 vulnerable 2026-06-08 05:26:41.185670 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4866 vulnerable 2026-06-08 05:26:41.092161 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4865 vulnerable 2026-06-08 05:26:41.089362 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4863 vulnerable 2026-06-08 05:26:41.086353 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4857 vulnerable 2026-06-08 05:26:41.080694 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4856 vulnerable 2026-06-08 05:26:41.078270 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4855 vulnerable 2026-06-08 05:26:41.066804 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4547 vulnerable 2026-06-08 05:25:59.513550 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4524 vulnerable 2026-06-08 05:25:59.475816 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.