Security Bulletin: A security vulnerability has been identified in IBM Jazz for Service Management shipped with Tivoli Netcool/OMNIbus WebGUI (CVE-2020-4939)

Summary IBM Jazz for Service Management JazzSM is shipped as a component of Tivoli Netcool/OMNIbus WebGUI. Information about a security vulnerability affecting JazzSM has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes...

CVE-2020-4939

IBM Jazz for Service Management (JazzSM) is vulnerable to Stored Cross-Site Scripting (CVE-2020-4939) affecting WebGUI 8.1.0 GA/FP and JazzSM 1.1.3. The vulnerability allows embedding arbitrary JavaScript in the Web UI, potentially leading to credentials disclosure within a trusted session. A fix...

Security Bulletin: IBM Jazz for Service Management is vulnerable to Stored Cross-Site Scripting (CVE-2020-4939)

Summary IBM Jazz for Service Management is vulnerable to Stored Cross-Site Scripting CVE-2020-4939 Vulnerability Details CVEID: CVE-2020-4939 Description: IBM Jazz for Service Management is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in t...