Security Bulletin: IBM Jazz for Service Management is vulnerable to stored cross-site scripting (CVE-2022-35721)

Summary IBM Jazz for Service Management is vulnerable to stored cross-site scripting. This vulnerability can exploit or hijack authenticated users sessions. Vulnerability Details CVEID:CVE-2022-35721 DESCRIPTION: IBM Jazz for Service Management 1.1.3 is vulnerable to stored cross-site scripting...

Security Bulletin: A security vulnerability has been identified in IBM Jazz for Service Management shipped with Tivoli Netcool/OMNIbus WebGUI (CVE-2022-35721)

Summary IBM Jazz for Service Management JazzSM is shipped as a component of Tivoli Netcool/OMNIbus WebGUI. Information about a security vulnerability affecting JazzSM has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes...

CVE-2022-35721

creationtimestamp| type| source ---|---|--- 2022-09-23 22:13:54+00:00| seen| https://t.me/cibsecurity/50380...

CVE-2022-35721

IBM Jazz for Service Management 1.1.3 is vulnerable to stored cross-site scripting (CVE-2022-35721), allowing embedded JavaScript in the Web UI and potentially credential disclosure within a trusted session. Affected product: Jazz for Service Management 1.1.3 (WebGUI inclusion via Tivoli Netcool/...