6.4 Medium

CVE-2021-20336 IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting

Description

IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Affected products and versions

Product	Affected versions	Fixed in
Tivoli Netcool/OMNIbus_GUI	8.1.0	No fix stated

Do you use Tivoli Netcool/OMNIbus_GUI?

Track this CVE Watch Tivoli Netcool/OMNIbus_GUI Check my SBOMs

www.cveye.io/en/cve/CVE-2021-20336

Timeline

Published March 11, 2021
Last modified September 16, 2024

References

www.ibm.com www.ibm.com
ibm-tivoli-cve202120336-xss (194350) exchange.xforce.ibmcloud.com

Track this CVE