Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:jazz_team_server:6.0.6:*:*:*:*:*:*:*

part: a version: 6.0.6 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductJazz Team Server (2735ff2f-de6a-5178-9e15-13b8cd5fde6f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-39043 vulnerable 2026-06-08 05:33:48.808358 Details available
MEDIUM (6.4)
IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 214032.
Published: 2022-05-20T16:20:17.548Z
Updated: 2024-09-16T22:03:16.549Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38879 vulnerable 2026-06-08 05:33:48.474139 Details available
LOW (3.7)
IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag. A remote attacker could exploit this vulnerability to obtain sensitive information from the cookie. IBM X-Force ID: 209057.
Published: 2022-06-24T16:15:44.246Z
Updated: 2024-09-16T17:03:52.831Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38871 vulnerable 2026-06-08 05:33:48.440884 Details available
MEDIUM (5.4)
IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 208345.
Published: 2022-06-24T16:15:42.719Z
Updated: 2024-09-17T02:01:29.212Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29865 vulnerable 2026-06-08 05:31:27.145640 Details available
MEDIUM (5.4)
IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 206091.
Published: 2022-06-24T16:15:40.841Z
Updated: 2024-09-17T02:42:06.431Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20551 vulnerable 2026-06-08 05:29:09.449895 Details available
MEDIUM (4)
IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 199149.
Published: 2022-06-24T16:15:39.197Z
Updated: 2024-09-17T03:28:38.565Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20544 vulnerable 2026-06-08 05:29:09.443075 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20543 vulnerable 2026-06-08 05:29:09.442572 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20421 vulnerable 2026-06-08 05:29:09.229589 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20355 vulnerable 2026-06-08 05:29:09.141601 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.