Engineering Workflow Management

Vendor:

First CVE: Jul 16, 2020 · Active for 6 years

48

Total CVEs

More Total CVEs than 97% of tracked products

9.6

Avg CVEs / Year

Higher CVE frequency than 95% of tracked products

5.6

Avg CVSS

Higher Avg CVSS than 16% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Engineering Workflow Management over time

Volume of CVEsAvg CVSS Base Score

First CVE

Jul 16, 2020

6 years ago

Most Recent CVE

Jun 22, 2026

34 days ago

CVE Severity & Scoring

Engineering Workflow Management48 CVEs

92%

8%

All CVEs352,719 CVEs

45%

40%

11%

MediumHigh

Attack Vector

Local0 (0.0%)

Network48 (100.0%)

Unknown0 (0.0%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low47 (97.9%)

High1 (2.1%)

Unknown0 (0.0%)

User Interaction

None11 (22.9%)

Unknown0 (0.0%)

Required37 (77.1%)

Privileges Required

Low46 (95.8%)

High0 (0.0%)

None2 (4.2%)

Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (48 CVEs).

48 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2024-51454MEDIUM IBM Engineering Workflow Management 7.0.2 through 7.0.2 Interim Fix 035, 7.0.3 through 7.0.3 Interim Fix 017, and 7.1 through 7.1 Interim Fix 004 is vulnerable to HTTP header injec	Jun 22, 2026	6.5	26	NO	NO
CVE-2021-29844HIGH IBM Jazz Team Server products is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potential	Oct 27, 2021	8.8	26	NO	NO
CVE-2025-33128MEDIUM IBM Engineering Workflow Management 7.0.3 through 7.0.3 Interim Fix 020, and 7.1 through 7.1 Interim Fix 007 is vulnerable to cross-site scripting. This vulnerability allows an aut	Jun 22, 2026	5.4	25	NO	NO
CVE-2021-29774HIGH IBM Jazz Team Server products could allow an authenticated user to obtain elevated privileges under certain configurations. IBM X-Force ID: 203025.	Oct 27, 2021	7.5	24	NO	NO
CVE-2021-20502HIGH IBM Jazz Foundation Products are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose	Mar 30, 2021	7.1	23	NO	NO
CVE-2021-29786MEDIUM IBM Jazz Team Server products stores user credentials in clear text which can be read by an authenticated user. IBM X-Force ID: 203172.	Oct 27, 2021	6.5	22	NO	NO
CVE-2020-4974MEDIUM IBM Jazz Foundation products are vulnerable to server side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potential	Jul 28, 2021	6.3	22	NO	NO
CVE-2020-5031MEDIUM IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus alter	Jul 19, 2021	5.4	21	NO	NO
CVE-2020-5004MEDIUM IBM Jazz Foundation products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended fun	Jul 28, 2021	5.4	20	NO	NO
CVE-2021-20504MEDIUM IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended fun	Mar 30, 2021	5.4	20	NO	NO

View all 48 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (48 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

0 CVEs

0.0% of CVEs· Bottom 1%

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

0 CVEs

0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (48 CVEs).

Media Mentions

Signals from CVEs in this product scope (48 CVEs).

Top CNAs Publishing CVEs For Engineering Workflow Management

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS
7.1.0	2	5.9	0.2%
7.0.3	3	5.9	0.2%
7.0.2	36	6.1	0.4%
7.0.1	37	5.6	0.6%
7.0.0	18	5.5	0.6%
7.0	26	5.6	0.6%
6.0.6.1	6	5.8	0.7%
6.0.6	6	5.8	0.7%
6.0.2	5	5.4	0.7%