Jazz For Service Management@1.1.3.10 Security Vulnerabilities and Issues — Jazz For Service Management@1.1.3.10 CVE List

Lucene search

IbmJazz For Service Management1.1.3.10

13 matches found

CVE•added 2021/09/23 6:15 p.m.•45 views

CVE-2021-29815

IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a ...

6.4CVSS5.3AI score0.00327EPSS

CVE•added 2021/09/21 4:15 p.m.•41 views

CVE-2021-29831

IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 204775...

8.1CVSS7.9AI score0.00664EPSS

CVE•added 2021/09/23 6:15 p.m.•38 views

CVE-2021-29833

6.4CVSS5.3AI score0.00327EPSS

CVE•added 2021/09/23 6:15 p.m.•36 views

CVE-2021-29816

IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 204341.

6.5CVSS6.5AI score0.0009EPSS

CVE•added 2021/09/23 6:15 p.m.•35 views

CVE-2021-29832

6.4CVSS5.3AI score0.00327EPSS

CVE•added 2021/09/23 6:15 p.m.•35 views

CVE-2021-29905

IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

5.4CVSS5.2AI score0.00346EPSS

CVE•added 2021/09/23 6:15 p.m.•33 views

CVE-2021-29814

6.4CVSS5.3AI score0.00327EPSS

CVE•added 2021/09/23 5:15 p.m.•32 views

CVE-2021-29800

IBM Tivoli Netcool/OMNIbus_GUI and IBM Jazz for Service Management 1.1.3.10 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a ...

6.4CVSS5.3AI score0.00327EPSS

CVE•added 2021/09/23 6:15 p.m.•31 views

CVE-2021-29810

6.4CVSS5.3AI score0.00327EPSS

CVE•added 2021/09/23 6:15 p.m.•31 views

CVE-2021-29812

6.4CVSS5.3AI score0.00327EPSS

CVE•added 2021/09/23 6:15 p.m.•30 views

CVE-2021-29904

IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI displays user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 207610.

6.2CVSS5.1AI score0.00022EPSS

CVE•added 2021/09/23 6:15 p.m.•30 views

CVE-2021-38877

IBM Jazz for Service Management 1.1.3.10 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 20...

6.4CVSS5.2AI score0.00327EPSS

CVE•added 2021/09/23 6:15 p.m.•28 views

CVE-2021-29813

6.4CVSS5.3AI score0.00327EPSS