CVE-2021-20421

IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.

• CWE-918

• https://exchange.xforce.ibmcloud.com/vulnerabilities/196300VDB Entry, Vendor Advisory
• https://www.ibm.com/support/pages/node/6597507Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/196300VDB Entry, Vendor Advisory
• https://www.ibm.com/support/pages/node/6597507Patch, Vendor Advisory

Published

Jun 24, 2022

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-20416IBM Guardium Data Encryption (GDE) 3.0.0.3 and 4.0.0.4 could…5.3
• CVE-2021-20417IBM Guardium Data Encryption (GDE) 4.0.0.4 could allow a rem…4.3
• CVE-2021-20418IBM Security Guardium 11.2 does not require that users shoul…9.8
• CVE-2021-20419IBM Security Guardium 11.2 uses weaker than expected cryptog…7.5
• CVE-2021-2042Vulnerability in the MySQL Server product of Oracle MySQL (c…2.3
• CVE-2021-20420IBM Security Guardium 11.2 could disclose sensitive informat…4.3
• CVE-2021-20422IBM Cloud Pak for Applications 4.3 could disclose sensitive …7.5
• CVE-2021-20423IBM Cloud Pak for Applications 4.3 could allow an authentica…8.8
• CVE-2021-20424IBM Cloud Pak for Applications 4.3 could allow a remote atta…4.3
• CVE-2021-20426IBM Security Guardium 11.2 contains hard-coded credentials, …9.8
• CVE-2021-20427IBM Security Guardium 11.2 uses an inadequate account lockou…7.5
• CVE-2021-20428IBM Security Guardium 11.2 could allow a remote attacker to …5.3