Tuleap Enterprise Edition vulnerabilities
8 known vulnerabilities in Tuleap Enterprise Edition from Dassault Systèmes. 8 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.1 High severity
Tuleap Enterprise Edition: Authorization Bypass Through User-Controlled Key
An Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker with tracker administration rights on one tracker to update or delete fields of all the trackers on the instanc
- 8.7 High severity
Tuleap Enterprise Edition: Improper Neutralization of Input During Web Page Generation
A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary script code in user's browser session.
- 8.7 High severity
Tuleap Enterprise Edition: Improper Neutralization of Input During Web Page Generation
A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary script code in user's browser session.
- 8.7 High severity
Tuleap Enterprise Edition: Improper Neutralization of Input During Web Page Generation
A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary script code in user's browser session.
- 8.8 High severity
Tuleap Enterprise Edition: Improper Neutralization of Special Elements used in an OS Command
An OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary commands on the server.
- 8.8 High severity
Tuleap Enterprise Edition: Improper Neutralization of Special Elements used in an OS Command
An OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.3 through 17.5 could allow an attacker to execute arbitrary commands on the server.
- 7.7 High severity
Tuleap Enterprise Edition: Use of Default Password
A Use of Default Password vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to gain access to user accounts created during XML import.
- 7.5 High severity
Tuleap Enterprise Edition: Authorization Bypass Through User-Controlled Key
An Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to access data of other users without authorization.