CVE-2021-29815

CVE-2021-29815 concerns IBM Jazz for Service Management (JazzSM) 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI WebGUI. The connected sources confirm a stored cross-site scripting (XSS) vulnerability in the Web UI that could allow an attacker to embed arbitrary JavaScript, potentially leading to cre...

Security Bulletin: IBM Jazz for Service Management is vulnerable to stored cross-site scripting (CVE-2021-29815)

Summary IBM Jazz for Service Management is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Vulnerability...