Security Bulletin: IBM Jazz for Service Management is vulnerable to cross-site scripting via searchWord parameter.

Summary IBM Jazz for Service Management is vulnerable to cross-site scripting, allowing malicious scripts to be executed via the searchWord parameter on the static help page CVE-2024-52892. Vulnerability Details CVEID:CVE-2024-52892 DESCRIPTION: IBM Jazz for Service Management is vulnerable to...

CVE-2024-52892

IBM Jazz for Service Management 1.1.3 through 1.1.3.23 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...

CVE-2024-52892

creationtimestamp| type| source ---|---|--- 2025-02-06 19:32:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113958608936576132 2025-02-06 20:16:14+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhjvoyrcog2t 2025-02-06 21:55:30+00:00| seen|...