5.3
Medium
CVE-2024-47106 IBM Jazz for Service Management 1.1.3 through 1.1.3.22 could allow a remote attacker to obtain sensitive information…
Description
IBM Jazz for Service Management 1.1.3 through 1.1.3.22 could allow a remote attacker to obtain sensitive information from improper access restrictions that could aid in further attacks against the system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jazz for Service Management 1.1 | 1.1.3 → 1.1.3.22 | No fix stated |
Other CVEs of Jazz for Service Management
The 26 CVEs of Jazz for Service Management →
CVE-2025-36249
IBM Jazz for Service Management 1.1.3.0 through 1.1.3.25 does not set the secure attribute on authorization tokens or…
3.7
Low
CVE-2025-36011
IBM Jazz for Service Management 1.1.3.0 through 1.1.3.24 does not set the secure attribute on authorization tokens or…
4.3
Medium
CVE-2024-52892
IBM Jazz for Service Management 1.1.3 through 1.1.3.23 is vulnerable to cross-site scripting
6.1
Medium
CVE-2023-46186
IBM Jazz for Service Management 1.1.3.20 could allow an unauthorized user to obtain sensitive file information using…
5.3
Medium