Engineering Test Management

Vendor:

First CVE: Jul 16, 2020 · Active for 6 years

45

Total CVEs

More Total CVEs than 97% of tracked products

11.3

Avg CVEs / Year

Higher CVE frequency than 96% of tracked products

5.5

Avg CVSS

Higher Avg CVSS than 14% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Engineering Test Management over time

Volume of CVEsAvg CVSS Base Score

First CVE

Jul 16, 2020

6 years ago

Most Recent CVE

Mar 3, 2024

873 days ago

CVE Severity & Scoring

Engineering Test Management45 CVEs

96%

All CVEs352,294 CVEs

45%

40%

11%

MediumHigh

Attack Vector

Local0 (0.0%)

Network45 (100.0%)

Unknown0 (0.0%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low45 (100.0%)

High0 (0.0%)

Unknown0 (0.0%)

User Interaction

None14 (31.1%)

Unknown0 (0.0%)

Required31 (68.9%)

Privileges Required

Low44 (97.8%)

High0 (0.0%)

None1 (2.2%)

Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (45 CVEs).

45 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2020-4974MEDIUM IBM Jazz Foundation products are vulnerable to server side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potential	Jul 28, 2021	6.3	22	NO	NO
CVE-2021-20371MEDIUM IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to obtain sensitive information when an error message is returned in the browser. This information co	Jun 2, 2021	6.5	22	NO	NO
CVE-2020-4732MEDIUM IBM Jazz Foundation and IBM Engineering products could allow an authenticated user to obtain sensitive information due to lack of security restrictions. IBM X-Force ID: 188126.	Jun 2, 2021	6.5	22	NO	NO
CVE-2020-4495HIGH IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to bypass security restrictions, caused by improper access control. By sending a specially-crafted re	Jun 2, 2021	8.8	22	NO	NO
CVE-2021-38934MEDIUM IBM Engineering Test Management 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus a	Aug 29, 2022	5.4	20	NO	NO
CVE-2020-5004MEDIUM IBM Jazz Foundation products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended fun	Jul 28, 2021	5.4	20	NO	NO
CVE-2021-20348MEDIUM IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from t	Jun 2, 2021	5.4	20	NO	NO
CVE-2021-20347MEDIUM IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from t	Jun 2, 2021	5.4	20	NO	NO
CVE-2021-20345MEDIUM IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from t	Jun 2, 2021	5.4	20	NO	NO
CVE-2021-20343MEDIUM IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from t	Jun 2, 2021	5.4	20	NO	NO

View all 45 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (45 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

0 CVEs

0.0% of CVEs· Bottom 1%

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

0 CVEs

0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (45 CVEs).

Media Mentions

Signals from CVEs in this product scope (45 CVEs).

Top CNAs Publishing CVEs For Engineering Test Management

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS
7.0.3	1	5.4	0.3%
7.0.2	16	5.5	0.5%
7.0.1	28	5.7	0.7%
7.0.0	43	5.5	0.7%
7.0	1	5.4	0.6%