Jazz For Service Management (Ibm) - vulnerabilities (CVEs)

28 CVEs, 0 in the last 30 days, 40 known versions, newest CVE from 2025-10-31. Vendor: Ibm.

CVEs of Jazz For Service Management

CVE-2025-36249 - CVSS 5.3 (medium), 2025-10-31: IBM Jazz for Service Management 1.1.3.0 through 1.1.3.25 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able…
CVE-2025-36011 - CVSS 4.3 (medium), 2025-09-09: IBM Jazz for Service Management 1.1.3.0 through 1.1.3.24 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able…
CVE-2024-52892 - CVSS 6.1 (medium), 2025-02-06: IBM Jazz for Service Management 1.1.3 through 1.1.3.23 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed…
CVE-2024-47106 - CVSS 7.5 (high), 2025-01-18: IBM Jazz for Service Management 1.1.3 through 1.1.3.22 could allow a remote attacker to obtain sensitive information from improper access restrictions that…
CVE-2023-46186 - CVSS 7.5 (high), 2024-02-14: IBM Jazz for Service Management 1.1.3.20 could allow an unauthorized user to obtain sensitive file information using forced browsing due to improper access…
CVE-2022-35722 - CVSS 6.4 (medium), 2022-09-28: IBM Jazz for Service Management is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI…
CVE-2022-35721 - CVSS 6.4 (medium), 2022-09-23: IBM Jazz for Service Management 1.1.3 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the…
CVE-2021-29814 - CVSS 6.4 (medium), 2021-09-23: IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to stored cross-site scripting. This vulnerability allows users to…
CVE-2021-29832 - CVSS 6.4 (medium), 2021-09-23: IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to stored cross-site scripting. This vulnerability allows users to…
CVE-2021-29905 - CVSS 5.4 (medium), 2021-09-23: IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to cross-site scripting. This vulnerability allows users to embed…
CVE-2021-29813 - CVSS 6.4 (medium), 2021-09-23: IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to stored cross-site scripting. This vulnerability allows users to…
CVE-2021-29816 - CVSS 6.5 (medium), 2021-09-23: IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to cross-site request forgery which could allow an attacker to…
CVE-2021-29904 - CVSS 6.2 (medium), 2021-09-23: IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI displays user credentials in plain clear text which can be read by a local user.…
CVE-2021-29815 - CVSS 6.4 (medium), 2021-09-23: IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to stored cross-site scripting. This vulnerability allows users to…
CVE-2021-29833 - CVSS 6.4 (medium), 2021-09-23: IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to stored cross-site scripting. This vulnerability allows users to…
CVE-2021-38877 - CVSS 6.4 (medium), 2021-09-23: IBM Jazz for Service Management 1.1.3.10 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in…
CVE-2021-29812 - CVSS 6.4 (medium), 2021-09-23: IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to stored cross-site scripting. This vulnerability allows users to…
CVE-2021-29810 - CVSS 6.4 (medium), 2021-09-23: IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to stored cross-site scripting. This vulnerability allows users to…
CVE-2021-29800 - CVSS 6.4 (medium), 2021-09-23: IBM Tivoli Netcool/OMNIbus_GUI and IBM Jazz for Service Management 1.1.3.10 is vulnerable to stored cross-site scripting. This vulnerability allows users to…
CVE-2021-29831 - CVSS 8.1 (high), 2021-09-21: IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to an XML External Entity Injection (XXE) attack when processing XML…
CVE-2019-4718 - CVSS 5.4 (medium), 2020-03-23: IBM Jazz for Service Management 3.13 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI…
CVE-2019-4186 - CVSS 6.1 (medium), 2019-09-05: IBM Jazz for Service Management 1.1.3 is vulnerable to HTTP header injection, caused by incorrect trust in the HTTP Host header during caching. By sending a…
CVE-2019-4275 - CVSS 6.2 (medium), 2019-08-02: IBM Jazz for Service Management 1.1.3, 1.1.3.1, and 1.1.3.2 could allow an unauthorized local user to create unique catalog names that could cause a denial of…
CVE-2019-4194 - CVSS 5.3 (medium), 2019-07-17: IBM Jazz for Service Management 1.1.3, 1.1.3.1, and 1.1.3.2 is missing function level access control that could allow a user to delete authorized resources.…
CVE-2019-4193 - CVSS 7.5 (high), 2019-07-11: IBM Jazz for Service Management 1.1.3 and 1.1.3.2 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized…
CVE-2019-4201 - CVSS 7.4 (high), 2019-06-06: IBM Jazz for Service Management 1.1.3, 1.1.3.1, and 1.1.3.2 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By…
CVE-2017-1631 - CVSS 8.8 (high), 2017-12-20: IBM Jazz for Service Management (IBM Tivoli Components 1.1.3) is vulnerable to cross-site request forgery which could allow an attacker to execute malicious…
CVE-2017-1746 - CVSS 8.8 (high), 2017-12-20: IBM Jazz for Service Management (IBM Tivoli Components 1.1.3) is vulnerable to cross-site request forgery which could allow an attacker to execute malicious…