2091 matches found
Cross site scripting
IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbusGUI 8.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...
Code injection
IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbusGUI 8.1.0 stores user credentials in plain clear text which can be read by an authenticated admin user. IBM X-Force ID: 204329...
Cross site scripting
IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbusGUI 8.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...
Cross site scripting
IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbusGUI 8.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...
Cross site scripting
IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbusGUI 8.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...
Cross site scripting
IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbusGUI 8.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...
Cross site scripting
IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbusGUI 8.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...
CVE-2021-29821
IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbusGUI 8.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...
CVE-2021-29821
IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 are reported vulnerable to cross-site scripting in the WebGUI, enabling an attacker to inject JavaScript into the Web UI and potentially disclose credentials within a trusted session. The affected component is the WebGUI (Ne...
CVE-2021-29820
CVE-2021-29820 affects IBM Tivoli Netcool/OMNIbus_GUI and IBM Jazz for Service Management (8.1.0). The vulnerability is a cross-site scripting flaw in the Web GUI that lets an attacker embed arbitrary JavaScript in the Web UI, potentially leading to credentials disclosure within a trusted session...
CVE-2021-29819
CVE-2021-29819 affects IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI WebGUI in IBM Tivoli Netcool/OMNIbus_GUI 8.1.x. The Web UI is vulnerable to cross-site scripting, enabling an attacker to embed arbitrary JavaScript in the Web UI and potentially disclose credentials within ...
CVE-2021-29819
IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbusGUI 8.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...
CVE-2021-29818
IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbusGUI 8.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...
CVE-2021-29818
Summary: CVE-2021-29818 affects IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0. The issue is cross-site scripting in the Web GUI, allowing embedding of arbitrary JavaScript in the UI and potentially credential disclosure within a trusted session. Affected product/version...
CVE-2021-29817
IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbusGUI 8.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...
CVE-2021-29817
IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 are affected by a cross-site scripting (XSS) vulnerability in the Web GUI that could allow embedding arbitrary JavaScript in the Web UI and potentially disclose credentials within a trusted session. Affected product: Tivoli ...
CVE-2021-29811
IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbusGUI 8.1.0 stores user credentials in plain clear text which can be read by an authenticated admin user. IBM X-Force ID: 204329...
CVE-2021-29811
The CVE-2021-29811 entry affects IBM Tivoli Netcool/OMNIbus_GUI WebGUI in the 8.1.x line. The root cause is storing user credentials in plain clear text, which can be read by an authenticated admin user, constituting an information disclosure vulnerability. The vulnerability affects IBM Jazz for ...
CVE-2021-29809
IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbusGUI 8.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...
CVE-2021-29809
CVE-2021-29809 affects IBM Tivoli Netcool/OMNIbus_GUI WebGUI (IBM Jazz for Service Management) 8.1.x. The vulnerability is a stored cross-site scripting flaw in the Web UI that can let an attacker embed arbitrary JavaScript in the UI, potentially leading to credentials disclosure within a trusted...