CVE-2016-5935

CVE-2016-5935 relates to IBM Jazz for Service Management via IBM Dashboard Application Services Hub (DASH) 3.1.3 (part of JazzSM 1.1.3). The vulnerability arises from a lack of SSL certificate validation when connecting to remote datastores from the WebSphere Admin Console in federation scenarios...

CVE-2016-9975

CVE-2016-9975 affects IBM Jazz for Service Management (1.1.2.1 and 1.1.3). The CSRF vulnerability could allow an attacker to perform unauthorized actions authenticated by a trusted user. Connected IBM advisories cite affected products and remediation: IBM Monitoring, IBM Application Diagnostics, ...