CVE-2021-29800

CVE-2021-29800 affects IBM Jazz for Service Management and Tivoli Netcool/OMNIbus_GUI WebGUI (version 1.1.3.10). The issue is a stored cross-site scripting vulnerability in the Web UI that can allow an attacker to embed arbitrary JavaScript, potentially leading to credentials disclosure within a ...

PT-2021-18537

Name of the Vulnerable Software and Affected Versions IBM Jazz for Service Management version 1.1.3.10 IBM Tivoli Netcool/OMNIbus GUI affected versions not specified Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and...

PT-2021-18492

Name of the Vulnerable Software and Affected Versions IBM Jazz for Service Management version 1.1.3.10 IBM Tivoli Netcool/OMNIbus GUI affected versions not specified Description The issue allows users to embed arbitrary JavaScript code in the Web UI, potentially altering the intended functionalit...

PT-2021-18496

Name of the Vulnerable Software and Affected Versions IBM Jazz for Service Management version 1.1.3.10 IBM Tivoli Netcool/OMNIbus GUI affected versions not specified Description The issue allows users to embed arbitrary JavaScript code in the Web UI, potentially altering the intended functionalit...

PT-2021-18495

Name of the Vulnerable Software and Affected Versions IBM Jazz for Service Management version 1.1.3.10 IBM Tivoli Netcool/OMNIbus GUI affected versions not specified Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and...

PT-2021-18494

Name of the Vulnerable Software and Affected Versions IBM Jazz for Service Management version 1.1.3.10 IBM Tivoli Netcool/OMNIbus GUI affected versions not specified Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and...

PT-2021-18498

Name of the Vulnerable Software and Affected Versions IBM Jazz for Service Management version 1.1.3.10 IBM Tivoli Netcool/OMNIbus GUI affected versions not specified Description The issue allows an attacker to execute malicious and unauthorized actions by exploiting a cross-site request forgery...

PT-2021-18497

Name of the Vulnerable Software and Affected Versions IBM Jazz for Service Management version 1.1.3.10 IBM Tivoli Netcool/OMNIbus GUI affected versions not specified Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and...

PT-2021-18507

Name of the Vulnerable Software and Affected Versions IBM Jazz for Service Management version 1.1.3.10 IBM Tivoli Netcool/OMNIbus GUI affected versions not specified Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and...

PT-2021-18508

Name of the Vulnerable Software and Affected Versions IBM Jazz for Service Management version 1.1.3.10 IBM Tivoli Netcool/OMNIbus GUI affected versions not specified Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and...

CVE-2021-29800: Improper Neutralization of Input During Web Page Generation

IBM Tivoli Netcool/OMNIbusGUI and IBM Jazz for Service Management 1.1.3.10 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...

CVE-2021-29816: Cross-Site Request Forgery (CSRF)

IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbusGUI is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 204341...

PT-2021-18536

Name of the Vulnerable Software and Affected Versions IBM Jazz for Service Management version 1.1.3.10 IBM Tivoli Netcool/OMNIbus GUI affected versions not specified Description The issue allows user credentials to be displayed in plain clear text, which can be read by a local user. Recommendatio...

PT-2021-18482

Name of the Vulnerable Software and Affected Versions IBM Tivoli Netcool/OMNIbus GUI and IBM Jazz for Service Management version 1.1.3.10 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials...

PT-2021-22305

Name of the Vulnerable Software and Affected Versions IBM Jazz for Service Management version 1.1.3.10 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, potentially altering the intended functionality and leading to credentials disclosure within a trusted sessio...

IBM Jazz for Service Management和IBM Tivoli Netcool/OMNIbus_GUI 跨站请求伪造漏洞

Jazz is IBM Rational's next-generation collaboration platform for software delivery technology.The Jazz platform has been carefully designed and developed specifically for global and geographically diverse teams, and will change the way people collaborate to build software - improving the...

CVE-2021-29832: Improper Neutralization of Input During Web Page Generation

IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbusGUI is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...

CVE-2021-29904: Cleartext Storage of Sensitive Information

IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbusGUI displays user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 207610...

CVE-2021-29815: Improper Neutralization of Input During Web Page Generation

IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbusGUI is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...

CVE-2021-38877: Improper Neutralization of Input During Web Page Generation

IBM Jazz for Service Management 1.1.3.10 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...