Code injection

IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbusGUI displays user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 207610...

Cross site scripting

IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbusGUI is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a truste...

CVE-2021-38877

IBM Jazz for Service Management 1.1.3.10 is vulnerable to stored cross-site scripting in the Web UI, potentially allowing an attacker to embed arbitrary JavaScript and cause credential disclosure in a trusted session. The vulnerability is identified as CVE-2021-38877. IBM/IBM X-Force references a...

CVE-2021-38877

IBM Jazz for Service Management 1.1.3.10 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...

CVE-2021-29905

CVE-2021-29905 affects IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI. The issue is a cross-site scripting vulnerability in the Web UI that could allow an attacker to embed arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. T...

CVE-2021-29904

CVE-2021-29904 concerns IBM Jazz for Service Management 1.1.3.10 and its IBM Tivoli Netcool/OMNIbus_GUI, where user credentials are exposed in plaintext to a local user via the GUI. The vulnerability stems from information disclosure in the affected components, enabling local access to credential...

CVE-2021-29904

IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbusGUI displays user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 207610...

CVE-2021-29833

CVE-2021-29833 affects IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI WebGUI. The vulnerability is stored cross-site scripting that could allow embedding arbitrary JavaScript in the Web UI and potentially lead to credentials disclosure within a trusted session. Affect...

CVE-2021-29833

IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbusGUI is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...

CVE-2021-29832

IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbusGUI is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...

CVE-2021-29832

CVE-2021-29832 affects IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI WebGUI. The issue is a stored cross-site scripting vulnerability in the Web UI that could allow an attacker to embed arbitrary JavaScript, potentially leading to credentials disclosure within a trus...

CVE-2021-29816

IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbusGUI is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 204341...

CVE-2021-29816

CVE-2021-29816 affects IBM Jazz for Service Management (JazzSM) 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI via a cross-site request forgery (CSRF) vulnerability that could allow an attacker to perform actions transmitted from a trusted user. IBM IBM Jazz for Service Management is vulnerable to C...

CVE-2021-29815

CVE-2021-29815 concerns IBM Jazz for Service Management (JazzSM) 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI WebGUI. The connected sources confirm a stored cross-site scripting (XSS) vulnerability in the Web UI that could allow an attacker to embed arbitrary JavaScript, potentially leading to cre...

CVE-2021-29814

IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbusGUI is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...

CVE-2021-29814

CVE-2021-29814 affects IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI WebGUI, with a stored cross-site scripting flaw that can embed arbitrary JavaScript in the Web UI and potentially disclose credentials within a trusted session. Public references describe the affect...

CVE-2021-29813

IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbusGUI is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...

CVE-2021-29813

CVE-2021-29813 affects IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI WebGUI. The issue is stored cross-site scripting caused by insufficient filtering/escaping in the Web UI, enabling arbitrary JavaScript execution that could lead to credentials disclosure within a t...

CVE-2021-29812

CVE-2021-29812 affects IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI Web UI. Root cause: stored cross-site scripting due to insufficient input filtering/escaping in the Web UI. Impact: potential for arbitrary JavaScript execution and credential disclosure within a tr...

CVE-2021-29810

IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI are affected by a stored cross-site scripting (XSS) vulnerability. The issue allows embedding arbitrary JavaScript in the Web UI, potentially leading to credentials disclosure within a trusted session. Remediation per IBM...