CVE-2020-4964

IBM Jazz Team Server products contain an undisclosed vulnerability that could allow an authenticated user to present a customized message on the application which could be used to phish other users. IBM X-Force ID: 192419.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
ibmCNA
4.3 MEDIUM
NETWORK
LOW
LOW
CVSS:3.0/I:L/C:N/A:N/UI:N/S:U/AV:N/AC:L/PR:L/RL:O/E:U/RC:C
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 37%
VendorProductVersion
ibmcollaborative_lifecycle_management
6.0.2
ibmcollaborative_lifecycle_management
6.0.6
ibmcollaborative_lifecycle_management
6.0.6.1
ibmdoors_next
7.0.0
ibmdoors_next
7.0.1
ibmdoors_next
7.0.2
ibmengineering_insights
7.0.0
ibmengineering_insights
7.0.1
ibmengineering_insights
7.0.2
ibmengineering_lifecycle_management
7.0.0
ibmengineering_lifecycle_management
7.0.1
ibmengineering_lifecycle_management
7.0.2
ibmengineering_requirements_management_doors_next
6.0.2
ibmengineering_requirements_management_doors_next
6.0.6
ibmengineering_requirements_management_doors_next
6.0.6.1
ibmengineering_test_management
7.0.0
ibmengineering_test_management
7.0.1
ibmengineering_test_management
7.0.2
ibmengineering_workflow_management
7.0.0
ibmengineering_workflow_management
7.0.1
ibmengineering_workflow_management
7.0.2
ibmrational_engineering_lifecycle_manager
6.0.2
ibmrational_engineering_lifecycle_manager
6.0.6
ibmrational_engineering_lifecycle_manager
6.0.6.1
ibmrational_quality_manager
6.0.2
ibmrational_quality_manager
6.0.6
ibmrational_quality_manager
6.0.6.1
ibmrational_team_concert
6.0.2
ibmrational_team_concert
6.0.6
ibmrational_team_concert
6.0.6.1
ibmremovable_media_management
6.0.2
ibmremovable_media_management
6.0.6
ibmremovable_media_management
6.0.6.1
ibmremovable_media_management
7.0.0
ibmremovable_media_management
7.0.1
ibmrhapsody_model_manager
6.0.2
ibmrhapsody_model_manager
6.0.6
ibmrhapsody_model_manager
6.0.6.1
𝑥
= Vulnerable software versions