PatchTheCVEcodebeamer vulnerabilities and fixes
Recent CVEs affecting codebeamer, with upgrade or downgrade steps. 7 tracked.
codebeamer has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2021-06-08. Highest priority: CVE-2020-26516 (score 49/100).
- CVE-2020-26517 MEDIUM 4.8 DOWNGRADE A cross-site scripting (XSS) issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4
- CVE-2020-26516 HIGH 8.8 DOWNGRADE A CSRF issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4
- CVE-2020-26515 HIGH 7.5 UPGRADE An insufficiently protected credentials issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4
- CVE-2020-26513 MEDIUM 5.5 UPGRADE An issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4
- CVE-2019-20635 MEDIUM 6.1 UPGRADE codeBeamer before 9.5.0-RC3 does not properly restrict the ability to execute custom Java code and access the
- CVE-2019-19913 MEDIUM 4.8 UPGRADE In Intland codeBeamer ALM 9.5 and earlier, there is stored XSS via the Trackers Title parameter.
- CVE-2019-19912 MEDIUM 4.8 UPGRADE In Intland codeBeamer ALM 9.5 and earlier, a cross-site scripting (XSS) vulnerability in the Upload Flash File
FAQ
How do I fix codebeamer vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is codebeamer being exploited right now?
None of the tracked codebeamer CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which codebeamer CVE should I patch first?
CVE-2020-26516 currently ranks highest (49/100): A CSRF issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4.