CVE-2021-20347

IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF)

Medium · published June 2, 2021

CVSS v3.0
5.4
EPSS
1%
Percentile
42.2
In the wild
Unconfirmed
What it is

IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 194596.

The record
Technical detail
CVSS v3.0
5.4 · MEDIUM
Vector
CVSS:3.0/C:L/S:U/AC:L/A:N/UI:N/I:L/AV:N/PR:L/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00504 · 42.2th percentile
Published
2021-06-02T20:40Z
EPSS history
Timeline
  • 02 JUN 20:40Z
    IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF)
    cvelistv5