CVE-2025-1826: medium-severity vulnerability in IBM Jazz Foundation
IBM Jazz Foundation cross-site scripting
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.4epss 0.2%
IBM Engineering Requirements Management DOORS Next (IBM Jazz Foundation 7.0.2 to 7.0.2 iFix034, 7.0.3 to 7.0.3 iFix016, and 7.1.0 to 7.1.0 iFix004) is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users on the host network to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Affected products
IBM · Jazz FoundationRelated CVEs — IBM Jazz Foundation
In the same product, most dangerous first.
CVE-2023-26280MEDIUMIBM Jazz Foundation improper access controlEPSS 0.4%CVE-2024-5591MEDIUMIBM Jazz Foundation information disclosureEPSS 0.4%CVE-2025-25048MEDIUMIBM Jazz Foundation path traversalEPSS 0.3%CVE-2023-45181MEDIUMIBM Jazz Foundation cross-site scriptingEPSS 0.3%CVE-2021-29669MEDIUMIBM Jazz Foundation cross-site scriptingEPSS 0.2%CVE-2024-43184MEDIUMIBM Jazz Foundation cross-site scriptingEPSS 0.2%