Intland Codebeamer
8 CVEs affecting Intland Codebeamer. Latest disclosed: 2023-08-29. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-4296 | High | 8.8 | 2023-08-29 | If an attacker tricks an admin user of PTC Codebeamer into clicking on a malicious link, it may allow the attacker to inject arbitrary code to be executed in… |
CVE-2020-26516 | High | 8.8 | 2021-06-08 | A CSRF issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4. Requests sent to the server that trigger actions do not contain a CSRF token and c… |
CVE-2020-26515 | High | 7.5 | 2021-06-08 | An insufficiently protected credentials issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4. The remember-me cookie (CB_LOGIN) issued by the a… |
CVE-2019-20635 | Medium | 6.1 | 2020-04-02 | codeBeamer before 9.5.0-RC3 does not properly restrict the ability to execute custom Java code and access the Java class loader via computed fields. |
CVE-2020-26513 | Medium | 5.5 | 2020-12-07 | An issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4. The ReqIF XML data, used by the codebeamer ALM application to import projects, is pars… |
CVE-2020-26517 | Medium | 4.8 | 2021-06-08 | A cross-site scripting (XSS) issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4. It is possible to perform XSS attacks through using the WebD… |
CVE-2019-19913 | Medium | 4.8 | 2020-03-30 | In Intland codeBeamer ALM 9.5 and earlier, there is stored XSS via the Trackers Title parameter. |
CVE-2019-19912 | Medium | 4.8 | 2020-03-30 | In Intland codeBeamer ALM 9.5 and earlier, a cross-site scripting (XSS) vulnerability in the Upload Flash File feature allows authenticated remote attackers to… |