Security Bulletin: Multiple Vulnerabilities in IBM Tivoli Netcool/OMNIbus_GUI (CVE-2019-17570, CVE-2025-64775)

Summary Multiple vulnerabilities were addressed in IBM Tivoli Netcool/OMNIbusGUI 8.1.0 Fix Pack 40. Vulnerability Details CVEID:CVE-2025-64775 DESCRIPTION: Denial of Service vulnerability in Apache Struts, file leak in multipart request processing causes disk exhaustion. This issue affects Apache...

CVE-2021-29815

IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbusGUI is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...

CVE-2021-29816

IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbusGUI is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 204341...

CVE-2021-29832

IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbusGUI is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...

CVE-2021-29812

IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbusGUI is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...

PT-2021-18496

Name of the Vulnerable Software and Affected Versions IBM Jazz for Service Management version 1.1.3.10 IBM Tivoli Netcool/OMNIbus GUI affected versions not specified Description The issue allows users to embed arbitrary JavaScript code in the Web UI, potentially altering the intended functionalit...

PT-2021-18494

Name of the Vulnerable Software and Affected Versions IBM Jazz for Service Management version 1.1.3.10 IBM Tivoli Netcool/OMNIbus GUI affected versions not specified Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and...

PT-2021-18507

Name of the Vulnerable Software and Affected Versions IBM Jazz for Service Management version 1.1.3.10 IBM Tivoli Netcool/OMNIbus GUI affected versions not specified Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and...

PT-2021-18508

Name of the Vulnerable Software and Affected Versions IBM Jazz for Service Management version 1.1.3.10 IBM Tivoli Netcool/OMNIbus GUI affected versions not specified Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and...

PT-2021-18498

Name of the Vulnerable Software and Affected Versions IBM Jazz for Service Management version 1.1.3.10 IBM Tivoli Netcool/OMNIbus GUI affected versions not specified Description The issue allows an attacker to execute malicious and unauthorized actions by exploiting a cross-site request forgery...

PT-2021-18497

Name of the Vulnerable Software and Affected Versions IBM Jazz for Service Management version 1.1.3.10 IBM Tivoli Netcool/OMNIbus GUI affected versions not specified Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and...

PT-2021-18537

Name of the Vulnerable Software and Affected Versions IBM Jazz for Service Management version 1.1.3.10 IBM Tivoli Netcool/OMNIbus GUI affected versions not specified Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and...

IBM Jazz for Service Management和IBM Tivoli Netcool/OMNIbus_GUI 跨站请求伪造漏洞

Jazz is IBM Rational's next-generation collaboration platform for software delivery technology.The Jazz platform has been carefully designed and developed specifically for global and geographically diverse teams, and will change the way people collaborate to build software - improving the...

PT-2021-18536

Name of the Vulnerable Software and Affected Versions IBM Jazz for Service Management version 1.1.3.10 IBM Tivoli Netcool/OMNIbus GUI affected versions not specified Description The issue allows user credentials to be displayed in plain clear text, which can be read by a local user. Recommendatio...

PT-2021-18482

Name of the Vulnerable Software and Affected Versions IBM Tivoli Netcool/OMNIbus GUI and IBM Jazz for Service Management version 1.1.3.10 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials...

PT-2021-18495

Name of the Vulnerable Software and Affected Versions IBM Jazz for Service Management version 1.1.3.10 IBM Tivoli Netcool/OMNIbus GUI affected versions not specified Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and...

PT-2021-18492

Name of the Vulnerable Software and Affected Versions IBM Jazz for Service Management version 1.1.3.10 IBM Tivoli Netcool/OMNIbus GUI affected versions not specified Description The issue allows users to embed arbitrary JavaScript code in the Web UI, potentially altering the intended functionalit...

IBM Jazz for Service Management和IBM Tivoli Netcool/OMNIbus_GUI 跨站脚本漏洞

IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbusGUI are both products of IBM Corporation, U.S.A. IBM Jazz for Service Management is an integrated service management product that provides visibility into the service management environment. IBM Tivoli Netcool/OMNIbusGUI is a graphical...

IBM Jazz for Service Management和IBM Tivoli Netcool/OMNIbus_GUI 跨站脚本漏洞

IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbusGUI are both products of IBM Corporation, U.S.A. IBM Jazz for Service Management is an integrated service management product that provides visibility into the service management environment. IBM Tivoli Netcool/OMNIbusGUI is a graphical...

PT-2021-18506

Name of the Vulnerable Software and Affected Versions IBM Jazz for Service Management version 1.1.3.10 IBM Tivoli Netcool/OMNIbus GUI affected versions not specified Description The issue allows a remote attacker to exploit an XML External Entity Injection XXE attack when processing XML data,...