IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI Cross-Site Scripting Vulnerability

IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI are both products of IBM Corporation, U.S.A. IBM Jazz for Service Management is an integrated service management product that provides visibility into the service management environment. IBM Tivoli Netcool/OMNIbus_GUI is a graphical user interface for the IBM Tivoli Netcool/OMNIbus service level management system. IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI contain a cross-site scripting vulnerability. An attacker could exploit the vulnerability to embed arbitrary JavaScript code in the Web UI to alter the intended functionality, potentially leading to credential disclosure in trusted sessions.