CVE Published: 19/07/2021 |
CVE Updated: 17/09/2024 |
CVE Year: 2021 Source: ibm |
Vendor: IBM |
Product: Engineering Workflow Management Status : PUBLISHED
CVE-2021-20507 Description
IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198235.