CVE-2021-29833

IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbusGUI is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...

CVE-2021-29833

CVE-2021-29833 affects IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI WebGUI. The vulnerability is stored cross-site scripting that could allow embedding arbitrary JavaScript in the Web UI and potentially lead to credentials disclosure within a trusted session. Affect...

CVE-2021-29832

IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbusGUI is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...

CVE-2021-29832

CVE-2021-29832 affects IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI WebGUI. The issue is a stored cross-site scripting vulnerability in the Web UI that could allow an attacker to embed arbitrary JavaScript, potentially leading to credentials disclosure within a trus...

CVE-2021-29816

IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbusGUI is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 204341...

CVE-2021-29816

CVE-2021-29816 affects IBM Jazz for Service Management (JazzSM) 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI via a cross-site request forgery (CSRF) vulnerability that could allow an attacker to perform actions transmitted from a trusted user. IBM IBM Jazz for Service Management is vulnerable to C...

CVE-2021-29815

CVE-2021-29815 concerns IBM Jazz for Service Management (JazzSM) 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI WebGUI. The connected sources confirm a stored cross-site scripting (XSS) vulnerability in the Web UI that could allow an attacker to embed arbitrary JavaScript, potentially leading to cre...

CVE-2021-29814

IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbusGUI is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...

CVE-2021-29814

CVE-2021-29814 affects IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI WebGUI, with a stored cross-site scripting flaw that can embed arbitrary JavaScript in the Web UI and potentially disclose credentials within a trusted session. Public references describe the affect...

CVE-2021-29813

IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbusGUI is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...

CVE-2021-29813

CVE-2021-29813 affects IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI WebGUI. The issue is stored cross-site scripting caused by insufficient filtering/escaping in the Web UI, enabling arbitrary JavaScript execution that could lead to credentials disclosure within a t...

CVE-2021-29812

CVE-2021-29812 affects IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI Web UI. Root cause: stored cross-site scripting due to insufficient input filtering/escaping in the Web UI. Impact: potential for arbitrary JavaScript execution and credential disclosure within a tr...

CVE-2021-29810

IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbusGUI is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...

CVE-2021-29810

IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI are affected by a stored cross-site scripting (XSS) vulnerability. The issue allows embedding arbitrary JavaScript in the Web UI, potentially leading to credentials disclosure within a trusted session. Remediation per IBM...

CVE-2021-29800

IBM Tivoli Netcool/OMNIbusGUI and IBM Jazz for Service Management 1.1.3.10 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...

Cross site scripting

IBM Tivoli Netcool/OMNIbusGUI and IBM Jazz for Service Management 1.1.3.10 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...

CVE-2021-29800

IBM Tivoli Netcool/OMNIbusGUI and IBM Jazz for Service Management 1.1.3.10 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...

CVE-2021-29800

CVE-2021-29800 affects IBM Jazz for Service Management and Tivoli Netcool/OMNIbus_GUI WebGUI (version 1.1.3.10). The issue is a stored cross-site scripting vulnerability in the Web UI that can allow an attacker to embed arbitrary JavaScript, potentially leading to credentials disclosure within a ...

IBM Jazz for Service Management和IBM Tivoli Netcool/OMNIbus_GUI 跨站请求伪造漏洞

Jazz is IBM Rational's next-generation collaboration platform for software delivery technology.The Jazz platform has been carefully designed and developed specifically for global and geographically diverse teams, and will change the way people collaborate to build software - improving the...

IBM Jazz for Service Management XML External Entity Injection Vulnerability

Jazz is IBM Rational's next-generation collaboration platform for software delivery technology.The Jazz platform has been carefully designed and developed specifically for global and geographically diverse teams, and will change the way people collaborate to build software - improving the...