Engineering Insights

Vendor:

First CVE: Jan 8, 2021 · Active for 5 years

22

Total CVEs

More Total CVEs than 94% of tracked products

22.0

Avg CVEs / Year

Higher CVE frequency than 98% of tracked products

5.4

Avg CVSS

Higher Avg CVSS than 14% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Engineering Insights over time

Volume of CVEsAvg CVSS Base Score

First CVE

Jan 8, 2021

5 years ago

Most Recent CVE

Apr 12, 2021

1,931 days ago

CVE Severity & Scoring

Engineering Insights22 CVEs

91%

9%

All CVEs352,719 CVEs

45%

40%

11%

MediumHigh

Attack Vector

Local0 (0.0%)

Network22 (100.0%)

Unknown0 (0.0%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low22 (100.0%)

High0 (0.0%)

Unknown0 (0.0%)

User Interaction

None5 (22.7%)

Unknown0 (0.0%)

Required17 (77.3%)

Privileges Required

Low21 (95.5%)

High0 (0.0%)

None1 (4.5%)

Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (22 CVEs).

22 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2021-20502HIGH IBM Jazz Foundation Products are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose	Mar 30, 2021	7.1	23	NO	NO
CVE-2021-20504MEDIUM IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended fun	Mar 30, 2021	5.4	20	NO	NO
CVE-2021-20503MEDIUM IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended fun	Mar 30, 2021	5.4	20	NO	NO
CVE-2021-20352MEDIUM IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended fun	Mar 30, 2021	5.4	20	NO	NO
CVE-2020-4733MEDIUM IBM Jazz Foundation products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended fun	Jan 8, 2021	5.4	20	NO	NO
CVE-2020-4691MEDIUM IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended fun	Jan 8, 2021	5.4	20	NO	NO
CVE-2020-4965HIGH IBM Jazz Team Server products use weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 192422.	Apr 12, 2021	7.5	19	NO	NO
CVE-2021-20520MEDIUM IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended fun	Mar 30, 2021	5.4	19	NO	NO
CVE-2021-20518MEDIUM IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended fun	Mar 30, 2021	5.4	19	NO	NO
CVE-2021-20506MEDIUM IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended fun	Mar 30, 2021	5.4	19	NO	NO

View all 22 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (22 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

0 CVEs

0.0% of CVEs· Bottom 1%

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

0 CVEs

0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (22 CVEs).

Media Mentions

Signals from CVEs in this product scope (22 CVEs).

Top CNAs Publishing CVEs For Engineering Insights

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS
7.0.2	12	5.6	0.6%
7.0.1	17	5.4	0.7%
7.0.0	4	5.7	0.7%
7.0	18	5.4	0.7%