Vulnerabilities

TI-2021-10466 CVE-2021-29800 · GHSA-6qmj-48p6-crf2

Cross-site scripting in IBM Jazz for Service Management

LOW 25

IBM Tivoli Netcool/OMNIbus_GUI and IBM Jazz for Service Management 1.1.3.10 is vulnerable to stored cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00495 Published 2021-09-23 No fix listed CWE-79

TI-2021-10514 CVE-2021-29856 · GHSA-j6h9-6xvv-v8ph

IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 could allow an authenticated usre to cause a denial…

LOW 31

IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 could allow an authenticated usre to cause a denial of service through the WebGUI Map Creation page.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.011 Published 2021-09-20 No fix listed

TI-2021-10487 CVE-2021-29821 · GHSA-fgg2-r72r-cjqw

Cross-site scripting in IBM Tivoli Netcool/OMNIbus

LOW 25

IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00539 Published 2021-09-20 No fix listed CWE-79

TI-2021-10486 CVE-2021-29820 · GHSA-7jgh-j4rc-4q2v

Cross-site scripting in IBM Tivoli Netcool/OMNIbus

LOW 25

IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00539 Published 2021-09-20 No fix listed CWE-79

TI-2021-10485 CVE-2021-29819 · GHSA-5cv6-f7pr-xhrj

Cross-site scripting in IBM Tivoli Netcool/OMNIbus

LOW 25

IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00539 Published 2021-09-20 No fix listed CWE-79

TI-2021-10484 CVE-2021-29818 · GHSA-233r-fgcw-c6hw

Cross-site scripting in IBM Tivoli Netcool/OMNIbus

LOW 25

IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00539 Published 2021-09-20 No fix listed CWE-79

TI-2021-10483 CVE-2021-29817 · GHSA-pgx2-pwxj-8wj5

Cross-site scripting in IBM Tivoli Netcool/OMNIbus

LOW 25

IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00539 Published 2021-09-20 No fix listed CWE-79

TI-2021-10477 CVE-2021-29811 · GHSA-w223-cx42-24c9

Insufficiently protected credentials in IBM Tivoli Netcool/OMNIbus

LOW 24

IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 stores user credentials in plain clear text which can be read by an authenticated admin user.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00968 Published 2021-09-20 No fix listed CWE-522

TI-2021-10475 CVE-2021-29809 · GHSA-7vhx-6x46-jv3p

Cross-site scripting in IBM Tivoli Netcool/OMNIbus

LOW 25

IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00539 Published 2021-09-20 No fix listed CWE-79

TI-2021-10474 CVE-2021-29808 · GHSA-5656-pvjm-rmvr

Cross-site scripting in IBM Tivoli Netcool/OMNIbus

LOW 25

IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00539 Published 2021-09-20 No fix listed CWE-79

TI-2021-10473 CVE-2021-29807 · GHSA-6xph-53h7-ghh2

Cross-site scripting in IBM Tivoli Netcool/OMNIbus

LOW 25

IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00539 Published 2021-09-20 No fix listed CWE-79

TI-2021-10472 CVE-2021-29806 · GHSA-mrpf-h2p4-3gmm

Cross-site scripting in IBM Tivoli Netcool/OMNIbus

LOW 25

IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00539 Published 2021-09-20 No fix listed CWE-79

TI-2021-03624 CVE-2021-20336 · GHSA-q6xf-cxm9-x3wg

Cross-site scripting in IBM Tivoli Netcool/OMNIbus_GUI

LOW 25

IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00558 Published 2021-03-11 No fix listed CWE-79

Vulnerabilities

Filters