Volerion logoVolerion
Volerion logoVolerion

IBM Jazz Foundation Cross-Site Scripting Vulnerability

Vulnerability

A cross-site scripting vulnerability has been identified in IBM Jazz Foundation versions 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2. This issue allows users to inject arbitrary JavaScript into the Web UI, potentially altering functionality and leading to credential disclosure within a trusted session.

Impact

Exploitation of this vulnerability could result in cross-site scripting, allowing for JavaScript injection that could be used to steal credentials or perform actions on behalf of the user.

Remediation

Users on IBM Engineering Lifecycle Management versions 7.0, 7.0.1, or any version prior to 7.0.3 should upgrade to version 7.0.3. Alternatively, users can upgrade to the latest 7.1.0 version.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
0.3
impact
3.5
exploitability
4.6
remediation
7.7
relevance
0.0
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.