Security Bulletin: WebSphere Application Server shipped with Jazz for Service Management (JazzSM) is vulnerable to Privilege Escalation Vulnerability (CVE-2020-4276)

Summary There is a privilege escalation vulnerability in WebSphere Application Server. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products| Versions ---|--- Jazz for Service Management| 1.1.3 - 1.1.3.6...

ServiceNow IT Service Management Cross-Site Scripting Vulnerability

ServiceNow IT Service Management ITSM is a set of IT service management tools from ServiceNow, Inc. in the United States. The tool provides incident management, problem management, change and release management and other functions. A cross-site scripting vulnerability exists in ServiceNow IT...

CVE-2019-20768

ServiceNow IT Service Management Kingston through Patch 14-1, London through Patch 7, and Madrid before patch 4 allow stored XSS via crafted sysparmitemguid and sysid parameters in an Incident Request to servicecatalog.do...

CVE-2019-20768

ServiceNow IT Service Management Kingston through Patch 14-1, London through Patch 7, and Madrid before patch 4 allow stored XSS via crafted sysparmitemguid and sysid parameters in an Incident Request to servicecatalog.do...

Security Bulletin: Information disclosure vulnerability in WebSphere Application Server shipped with Jazz for Service Management (CVE-2019-4441)

Summary Information disclosure vulnerability in WebSphere Application Server shipped with Jazz for Service Management CVE-2019-4441 Vulnerability Details CVEID: CVE-2019-4441 DESCRIPTION: IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0, and Liberty could allow a remote attacker to obtain...

Unspecified Vulnerability in Oracle Solaris (CNVD-2020-26988)

Oracle Solaris is a Unix-like operating system. A security vulnerability exists in the SMF command svcbundle component in Oracle Solaris 11. An attacker can exploit the vulnerability to update, insert, or delete access to certain Oracle Solaris data...

CVE-2020-2749

Vulnerability in the Oracle Solaris product of Oracle Systems component: SMF command svcbundle. The supported version that is affected is 11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle...

Matrix42 Workspace Management 9.1.2.2765 Cross Site Scripting Vulnerability

Matrix42 Workspace Management version 9.1.2.2765 suffers from a persistent cross site scripting vulnerability. Matrix42 Workspace Management 9.1.2.2765 – Stored Cross-Site Scripting =============================================================================== Identifiers...

CVE-2020-11706

An issue was discovered in ProVide formerly zFTPServer through 13.1. The Admin Interface allows CSRF for actions such as: Change any username and password, admin ones included; Create/Delete users; Enable/Disable Services; Set a rogue update proxy; and Shutdown the server...

Cross site request forgery (csrf)

An issue was discovered in ProVide formerly zFTPServer through 13.1. The Admin Interface allows CSRF for actions such as: Change any username and password, admin ones included; Create/Delete users; Enable/Disable Services; Set a rogue update proxy; and Shutdown the server...

IBM Jazz for Service Management Cross-Site Scripting Vulnerability (CNVD-2020-19257)

IBM Jazz for Service Management is an integrated service management product from IBM that provides visibility into the service management environment. A cross-site scripting vulnerability exists in IBM Jazz for Service Management version 1.1.3. A remote attacker can exploit this vulnerability to...

CVE-2019-4718

IBM Jazz for Service Management 3.13 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 172123...

Cross site scripting

IBM Jazz for Service Management 3.13 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 172123...

CVE-2019-4718

IBM Jazz for Service Management is vulnerable to cross‑site scripting (CVE-2019-4718) in its Web UI, potentially allowing injection of arbitrary JavaScript and credential disclosure within a trusted session. The CVE entry notes affected version 3.13 with an overall CVSS v3.0 base score of 5.4 (ME...

CVE-2019-4718

IBM Jazz for Service Management 3.13 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 172123...

IBM Jazz for Service Management Cross-Site Scripting Vulnerability

IBM Jazz for Service Management is an integrated service management product from IBM that provides visibility into the service management environment. A cross-site scripting vulnerability exists in IBM Jazz for Service Management version 1.1.3. A remote attacker can exploit this vulnerability to...

Security Bulletin: IBM Jazz for Service Management is vulnerable to Open redirection vulnerabilities arise when an application incorporates user-controllable data into the target of a redirection in an unsafe way

Summary IBM Jazz for Service Management is vulnerable to Open redirection vulnerabilities arise when an application incorporates user-controllable data into the target of a redirection in an unsafe way Vulnerability Details Third Party Entry: PSIRT-ADV0020686 DESCRIPTION: Created from Advisory:...

Security Bulletin: IBM Jazz for Service Management is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI ( CVE-2019-4717)

Summary IBM Jazz for Service Management is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI CVE-2019-4717 Vulnerability Details CVEID: CVE-2019-4717 DESCRIPTION: IBM Jazz for Service Management is vulnerable to cross-site...

Security Bulletin: IBM Jazz for Service Management is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI (CVE-2019-4718)

Summary IBM Jazz for Service Management is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI CVE-2019-4718 Vulnerability Details CVEID: CVE-2019-4718 DESCRIPTION: IBM Jazz for Service Management is vulnerable to cross-site...

Security Bulletin: WebSphere Application Server shipped with Jazz for Service Management (JazzSM) is vulnerable to Apache Commons Beanutils (CVE-2019-10086)

Summary There is a vulnerability in Apache Commons Beanutils that is used by WebSphere Application Server. This has been addressed. Vulnerability Details Refer to the security bulletinss listed in the Remediation/Fixes section Affected Products and Versions Affected Products| Versions ---|--- Jaz...