Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:jazz_team_server:7.0.2:*:*:*:*:*:*:*

part: a version: 7.0.2 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductJazz Team Server (2735ff2f-de6a-5178-9e15-13b8cd5fde6f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-39043 vulnerable 2026-06-08 05:33:48.808612 Details available
MEDIUM (6.4)
IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 214032.
Published: 2022-05-20T16:20:17.548Z
Updated: 2024-09-16T22:03:16.549Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38879 vulnerable 2026-06-08 05:33:48.474315 Details available
LOW (3.7)
IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag. A remote attacker could exploit this vulnerability to obtain sensitive information from the cookie. IBM X-Force ID: 209057.
Published: 2022-06-24T16:15:44.246Z
Updated: 2024-09-16T17:03:52.831Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38871 vulnerable 2026-06-08 05:33:48.443981 Details available
MEDIUM (5.4)
IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 208345.
Published: 2022-06-24T16:15:42.719Z
Updated: 2024-09-17T02:01:29.212Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29865 vulnerable 2026-06-08 05:31:27.148487 Details available
MEDIUM (5.4)
IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 206091.
Published: 2022-06-24T16:15:40.841Z
Updated: 2024-09-17T02:42:06.431Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20551 vulnerable 2026-06-08 05:29:09.450053 Details available
MEDIUM (4)
IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 199149.
Published: 2022-06-24T16:15:39.197Z
Updated: 2024-09-17T03:28:38.565Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20544 vulnerable 2026-06-08 05:29:09.443156 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20543 vulnerable 2026-06-08 05:29:09.442652 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20421 vulnerable 2026-06-08 05:29:09.229777 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20355 vulnerable 2026-06-08 05:29:09.143827 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.