IBM Jazz Foundation

Name: IBM Jazz Foundation
Brand: IBM

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical0high3medium0low

updated 2026-10-28

vulnerabilities (9)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-26280US	—	0.41% (35th)	—	no fix	2024-11-25	≤ 7.0.2, 7.0.3
CVE-2024-5591US	—	0.36% (30th)	—	no fix	2025-01-03	≤ 7.0.2, 7.0.3, 7.1.0
CVE-2025-25048US	—	0.33% (26th)	—	no fix	2025-09-04	3 versions
CVE-2023-45181US	—	0.30% (22nd)	—	no fix	2024-11-25	≤ 7.0.2
CVE-2021-29669US	medium5.4	0.23% (14th)	—	no fix	2025-01-12	≤ 6.0.6, 6.0.6.1, 7.0, 7.0.1, 7.0.2
CVE-2024-43184US	—	0.21% (11th)	—	no fix	2025-09-04	3 versions
CVE-2025-15395US	medium5.4OT elevated	0.20% (10th)	—	no fix	2026-02-02	2 versions
CVE-2024-41780US	medium4.6	0.19% (9th)	—	no fix	2025-01-03	≤ 7.0.2, 7.0.3, 7.1.0
CVE-2025-1826US	—	0.18% (8th)	—	7.0.2 iFix035	2025-10-07	7 versions

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4 CVEs
CWE-209Generation of Error Message Containing Sensitive Information1 CVEs
CWE-23Relative Path Traversal1 CVEs
CWE-266Incorrect Privilege Assignment1 CVEs
CWE-359Exposure of Private Personal Information to an Unauthorized Actor1 CVEs
CWE-863Incorrect Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.