101 matches found
Security Bulletin: IBM Jazz for Service Management is affected by improper neutralization of input and incomplete authorization vulnerabilities in Apache ActiveMQ
Summary IBM Jazz for Service Management is affected by improper neutralization of input and incomplete authorization vulnerabilities in Apache ActiveMQ CVE-2026-42253, CVE-2026-46605 Vulnerability Details CVEID:CVE-2026-42253 DESCRIPTION: Improper Neutralization of Input During Web Page Generatio...
CVE-2025-36249: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
IBM Jazz for Service Management 1.1.3.0 through 1.1.3.25 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to...
EUVD-2021-16284
Malware in sbrugna...
EUVD-2022-38596
Malicious code in bioql PyPI...
CVE-2025-36011: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
IBM Jazz for Service Management 1.1.3.0 through 1.1.3.24 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to...
CVE-2024-52892: Improper Neutralization of Input During Web Page Generation
IBM Jazz for Service Management 1.1.3 through 1.1.3.23 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...
CVE-2024-47106: Files or Directories Accessible to External Parties
IBM Jazz for Service Management 1.1.3 through 1.1.3.22 could allow a remote attacker to obtain sensitive information from improper access restrictions that could aid in further attacks against the system...
CVE-2023-46186: Direct Request
IBM Jazz for Service Management 1.1.3.20 could allow an unauthorized user to obtain sensitive file information using forced browsing due to improper access controls. IBM X-Force ID: 269929...
Security Bulletin: IBM Jazz for Service Management is vulnerable to commons-fileupload-1.4.jar (Publicly disclosed vulnerability found by Mend) (CVE-2023-24998)
Summary IBM Jazz for Service Management is vulnerable to commons-fileupload-1.4.jar Publicly disclosed vulnerability found by Mend. The Apache Commons FileUpload component provides a simple yet flexible means of adding support for multipar file upload functionality to servlets and web application...
Security Bulletin: IBM Jazz for Service Management is vulnerable to stored cross-site scripting (CVE-2022-35722)
Summary IBM Jazz for Service Management is vulnerable to stored cross-site scripting. This vulnerability can exploit or hijack authenticated users sessions. Vulnerability Details CVEID:CVE-2022-35722 DESCRIPTION: IBM Jazz for Service Management is vulnerable to stored cross-site scripting. This...
Security Bulletin: A security vulnerability has been identified in IBM Jazz for Service Management shipped with Tivoli Netcool/OMNIbus WebGUI (CVE-2022-35722)
Summary IBM Jazz for Service Management JazzSM is shipped as a component of Tivoli Netcool/OMNIbus WebGUI. Information about a security vulnerability affecting JazzSM has been published in a security bulletin. Vulnerability Details CVEID:CVE-2022-35722 DESCRIPTION: IBM Jazz for Service Management...
PT-2022-22950 · Ibm · Ibm Jazz For Service Management
Name of the Vulnerable Software and Affected Versions: IBM Jazz for Service Management affected versions not specified Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, potentially altering the intended functionality and leading to credentials disclosure within...
CVE-2022-35722: Improper Neutralization of Input During Web Page Generation
IBM Jazz for Service Management is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 231381...
CVE-2022-35721: Improper Neutralization of Input During Web Page Generation
IBM Jazz for Service Management 1.1.3 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...
PT-2022-6148
Name of the Vulnerable Software and Affected Versions IBM Jazz for Service Management version 1.1.3 Description The issue is related to stored cross-site scripting, allowing users to embed arbitrary JavaScript code in the Web UI, potentially altering the intended functionality and leading to...
Security Bulletin: IBM Jazz for Service Management is vulnerable to a Apache Log4j vulnerabilities(CVE-2021-45105, CVE-2021-45046)
Summary Based on current information and analysis, IBM Jazz for Service Management does not use Apache log4j-core library which is vulnerable to CVE-2021-45105, CVE-2021-45046 . However, IBM Jazz for Service Management may be impacted because the old version of Log4j-1.2-api and Log4j-api are use...
Security Bulletin: Mulitple Apache Log4j vulnerabilities impact IBM Tivoli System Automation Application Manager (CVE-2021-45105, CVE-2021-45046)
Summary There are multiple vulnerabilities identified within the Apache Log4j library used by a component of IBM Tivoli System Automation Application Manager. The fix includes Apache Log4j 2.17.0. Vulnerability Details CVEID: CVE-2021-45105 DESCRIPTION: Apache Log4j is vulnerable to a denial of...
Security Bulletin: IBM Tivoli System Automation Application Manager is vulnerable to Apache Log4j vulnerability (CVE-2021-44228)
Summary A vulnerability was identified within the Apache Log4j library that is used by a component of IBM Tivoli System Automation Application Manager. This vulnerability has been addressed. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected...
PT-2021-18496
Name of the Vulnerable Software and Affected Versions IBM Jazz for Service Management version 1.1.3.10 IBM Tivoli Netcool/OMNIbus GUI affected versions not specified Description The issue allows users to embed arbitrary JavaScript code in the Web UI, potentially altering the intended functionalit...
PT-2021-18495
Name of the Vulnerable Software and Affected Versions IBM Jazz for Service Management version 1.1.3.10 IBM Tivoli Netcool/OMNIbus GUI affected versions not specified Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and...