CO
Product
Codebeamer
8
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 6Low 0
Watch
Add Codebeamer to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-4296 | 6.1 | Aug 29 | If an attacker tricks an admin user of PTC Codebeamer into clicking on a malicious link, it may allow the attacker to inject arbitrary code to be executed in the browser on the… Affected: 21.09.0; 21.09.0; 21.09.0; 21.09.0; 21.09.0; 21.09.0; +23 more |
| CVE-2019-20635 | 6.1 | Apr 2 | codeBeamer before 9.5.0-RC3 does not properly restrict the ability to execute custom Java code and access the Java class loader via computed fields Affected: through 9.4.0; 9.5.0 |
| CVE-2020-26513 | 5.5 | Dec 7 | An issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4 Affected: 10.0.0 before 10.1.0; 10.1.0; 10.1.0; 10.1.0; 10.1.0; 10.1.0 |
| CVE-2020-26517 | 4.8 | Jun 8 | A cross-site scripting (XSS) issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4 Affected: 10.0.0; 10.0.0; 10.0.0; 10.0.0; 10.0.0; 10.0.1; +6 more |
| CVE-2019-19913 | 4.8 | Mar 30 | In Intland codeBeamer ALM 9.5 and earlier, there is stored XSS via the Trackers Title parameter Affected: through 9.5 |
| CVE-2019-19912 | 4.8 | Mar 30 | In Intland codeBeamer ALM 9.5 and earlier, a cross-site scripting (XSS) vulnerability in the Upload Flash File feature allows authenticated remote attackers to inject arbitrary… Affected: through 9.5 |
Showing 6