Filtered by vendor Dassault Systèmes Subscriptions
Filtered by product Tuleap Enterprise Edition Subscriptions

Search

Switch to Advanced Search (Beta)
Total 9 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-105412 1 Dassault Systèmes 1 Tuleap Enterprise Edition 2026-10-16 7.1 High
An SQL Injection vulnerability affecting Tuleap Enterprise Edition 17.5 could allow an attacker to have read access the Tuleap database.
CVE-2026-105411 1 Dassault Systèmes 1 Tuleap Enterprise Edition 2026-10-16 8.1 High
An Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker with tracker administration rights on one tracker to update or delete fields of all the trackers on the instance.
CVE-2026-105410 1 Dassault Systèmes 1 Tuleap Enterprise Edition 2026-10-16 8.7 High
A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary script code in user's browser session.
CVE-2026-105409 1 Dassault Systèmes 1 Tuleap Enterprise Edition 2026-10-15 8.7 High
A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary script code in user's browser session.
CVE-2026-105408 1 Dassault Systèmes 1 Tuleap Enterprise Edition 2026-10-15 8.7 High
A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary script code in user's browser session.
CVE-2026-105407 1 Dassault Systèmes 1 Tuleap Enterprise Edition 2026-10-15 8.8 High
An OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary commands on the server.
CVE-2026-84285 1 Dassault Systèmes 1 Tuleap Enterprise Edition 2026-09-21 8.8 High
An OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.3 through 17.5 could allow an attacker to execute arbitrary commands on the server.
CVE-2026-19851 1 Dassault Systèmes 1 Tuleap Enterprise Edition 2026-08-25 7.7 High
A Use of Default Password vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to gain access to user accounts created during XML import.
CVE-2026-14165 1 Dassault Systèmes 1 Tuleap Enterprise Edition 2026-07-13 7.5 High
An Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to access data of other users without authorization.