CVE-2024-28793

Description

References

• openwall.com/lists/oss-security/2024/05/24/2 · Mailing List
• exchange.xforce.ibmcloud.com/vulnerabilities/286830 · Vendor Advisory
• ibm.com/support/pages/node/7154955 · Vendor Advisory

More vulnerabilities in engineering workflow management

• CVE-2024-51454MEDIUM 6.1IBM Engineering Workflow Management 7.0.2 through 7.0.2 Interim Fix 035, 7.0.3 through 7.0.3 Interim Fix 017, and 7.1 through 7.1 Interim Fi…
• CVE-2025-33128MEDIUM 5.4IBM Engineering Workflow Management 7.0.3 through 7.0.3 Interim Fix 020, and 7.1 through 7.1 Interim Fix 007 is vulnerable to cross-site scr…
• CVE-2021-29701MEDIUM 4.3IBM Engineering Workflow Management 7.0, 7.0.1, and 7.0.2 as well as IBM Rational Team Concert 6.0.6 and 6.0.6.1 could allow an authneticate…
• CVE-2021-29844HIGH 8.8IBM Jazz Team Server products is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthor…
• CVE-2021-29786MEDIUM 6.5IBM Jazz Team Server products stores user credentials in clear text which can be read by an authenticated user. IBM X-Force ID: 203172.