CVSS 3.1
5.4 mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:NCVE-2021-20348
Medium (5.4) in ibm. EPSS 0.5% chance of exploitation in the next 30 days.
IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-ForceID: 194597.
Severity
- EPSS
- 0.5% chance of exploitation in the next 30 days; higher than 43% of CVEs (scores of 2026-10-31)
- CWE
- CWE-918
- Published
- Modified
- Record from
- the NVD, synced
Affected
- ibm:collaborative_lifecycle_management
- ibm:engineering_lifecycle_management
- ibm:engineering_lifecycle_optimization_-_engineering_insights
- ibm:engineering_lifecycle_optimization_-_publishing
- ibm:engineering_test_management
- ibm:rational_doors_next_generation
- ibm:rational_engineering_lifecycle_manager
- ibm:rational_quality_manager
- ibm:removable_media_manager