Security Bulletin: Multiple vulnerabilities is affecting Tivoli Netcool/OMNIbus WebGUI (CVE-2021-20336, CVE-2020-17530)

Summary Fix is available for multiple vulnerabilities affecting Tivoli Netcool/OMNIbus WebGUI CVE-2021-20336, CVE-2020-17530. Vulnerability Details CVEID: CVE-2021-20336 DESCRIPTION: IBM Tivoli Netcool/OMNIbusGUI is vulnerable to stored cross-site scripting. This vulnerability allows users to emb...

CVE-2021-20336

CVE-2021-20336 affects IBM Tivoli Netcool/OMNIbus_GUI 8.1.x. The root cause is a stored cross-site scripting (XSS) flaw in the Web GUI that can cause arbitrary JavaScript execution, potentially enabling credential disclosure within a trusted session. IBM’s advisory documents multiple vulnerabilit...