CVE-2004-2563: Serena Software Serena Teamtrack

Medium severity, CVSS 5.8. EPSS: 2.2% chance of exploitation in the next 30 days.

Serena TeamTrack 6.1.1 allows remote attackers to obtain sensitive information such as user names, versions, and database information, and conduct cross-site scripting (XSS) attacks, via a direct request to tmtrack.dll with modified LoginPage and Template parameters.

Affected products

• Serena Software Serena Teamtrack: version 6.1.1 only

Published 2004-12-31. Last modified 2026-06-16.