Lucene search

IBMC96F601E559080438EEE79F1B8F0BE7F58F0ADE9451524750E4DA4F271516B14

HistoryNov 21, 2022 - 8:12 p.m.

Security Bulletin: A security vulnerability has been identified in IBM Jazz for Service Management shipped with Tivoli Netcool/OMNIbus WebGUI (CVE-2022-35721)

2022-11-2120:12:58

www.ibm.com

ibm jazz

service management

tivoli netcool

omnibus webgui

cve-2022-35721

cross-site scripting

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

19.6%

JSON

Summary

IBM Jazz for Service Management (JazzSM) is shipped as a component of Tivoli Netcool/OMNIbus WebGUI. Information about a security vulnerability affecting JazzSM has been published in a security bulletin.

Vulnerability Details

Refer to the security bulletin(s) listed in the Remediation/Fixes section

Affected Products and Versions

Principal Product and Version(s)	Affected Supporting Product and Version
WebGUI 8.1.0 GA and FP	IBM Jazz for Service Management V1.1.3

Remediation/Fixes

Please consult the security bulletin IBM Jazz for Service Management is vulnerable to stored cross-site scripting (CVE-2022-35721) for vulnerability details and information about fixes.

Workarounds and Mitigations

None

Affected configurations

Vulners

Node

ibmtivoli_netcool\/omnibusMatch8.1.0

VendorProductVersionCPE
ibmtivoli_netcool\/omnibus8.1.0cpe:2.3:a:ibm:tivoli_netcool\/omnibus:8.1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	tivoli_netcool\/omnibus	8.1.0	cpe:2.3:a:ibm:tivoli_netcool\/omnibus:8.1.0:::::::*