| CVE-2025-36249 |
IBM Jazz for Service Management 1.1.3.0 through 1.1.3.25 does not set the secure attribute on authorization tokens or…
|
3.7
Low
|
Oct 31, 2025 |
| CVE-2025-36011 |
IBM Jazz for Service Management 1.1.3.0 through 1.1.3.24 does not set the secure attribute on authorization tokens or…
|
4.3
Medium
|
Sep 9, 2025 |
| CVE-2024-52892 |
IBM Jazz for Service Management 1.1.3 through 1.1.3.23 is vulnerable to cross-site scripting
|
6.1
Medium
|
Feb 6, 2025 |
| CVE-2024-47106 |
IBM Jazz for Service Management 1.1.3 through 1.1.3.22 could allow a remote attacker to obtain sensitive information…
|
5.3
Medium
|
Jan 18, 2025 |
| CVE-2023-46186 |
IBM Jazz for Service Management 1.1.3.20 could allow an unauthorized user to obtain sensitive file information using…
|
5.3
Medium
|
Feb 14, 2024 |
| CVE-2022-35722 |
IBM Jazz for Service Management is vulnerable to stored cross-site scripting
|
6.4
Medium
|
Sep 28, 2022 |
| CVE-2022-35721 |
IBM Jazz for Service Management 1.1.3 is vulnerable to stored cross-site scripting
|
6.4
Medium
|
Sep 23, 2022 |
| CVE-2021-38877 |
IBM Jazz for Service Management 1.1.3.10 is vulnerable to stored cross-site scripting
|
6.4
Medium
|
Sep 23, 2021 |
| CVE-2021-29905 |
IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to cross-site scripting
|
5.4
Medium
|
Sep 23, 2021 |
| CVE-2021-29904 |
IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI displays user credentials in plain clear…
|
6.2
Medium
|
Sep 23, 2021 |
| CVE-2021-29833 |
IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to stored cross-site scripting
|
6.4
Medium
|
Sep 23, 2021 |
| CVE-2021-29832 |
IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to stored cross-site scripting
|
6.4
Medium
|
Sep 23, 2021 |
| CVE-2021-29816 |
IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to cross-site request…
|
4.3
Medium
|
Sep 23, 2021 |
| CVE-2021-29815 |
IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to stored cross-site scripting
|
6.4
Medium
|
Sep 23, 2021 |
| CVE-2021-29814 |
IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to stored cross-site scripting
|
6.4
Medium
|
Sep 23, 2021 |
| CVE-2021-29813 |
IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to stored cross-site scripting
|
6.4
Medium
|
Sep 23, 2021 |
| CVE-2021-29812 |
IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to stored cross-site scripting
|
6.4
Medium
|
Sep 23, 2021 |
| CVE-2021-29810 |
IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to stored cross-site scripting
|
6.4
Medium
|
Sep 23, 2021 |
| CVE-2021-29800 |
IBM Tivoli Netcool/OMNIbus_GUI and IBM Jazz for Service Management 1.1.3.10 is vulnerable to stored cross-site scripting
|
6.4
Medium
|
Sep 23, 2021 |
| CVE-2021-29831 |
IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to an XML External Entity…
|
7.1
High
|
Sep 21, 2021 |
| CVE-2019-4718 |
IBM Jazz for Service Management 3.13 is vulnerable to cross-site scripting
|
5.4
Medium
|
Mar 23, 2020 |
| CVE-2019-4186 |
IBM Jazz for Service Management 1.1.3 is vulnerable to HTTP header injection, caused by incorrect trust in the HTTP Host…
|
5.3
Medium
|
Sep 5, 2019 |
| CVE-2019-4275 |
IBM Jazz for Service Management 1.1.3, 1.1.3.1, and 1.1.3.2 could allow an unauthorized local user to create unique…
|
6.2
Medium
|
Aug 2, 2019 |
| CVE-2019-4194 |
IBM Jazz for Service Management 1.1.3, 1.1.3.1, and 1.1.3.2 is missing function level access control that could allow…
|
5.3
Medium
|
Jul 17, 2019 |
| CVE-2019-4193 |
IBM Jazz for Service Management 1.1.3 and 1.1.3.2 stores sensitive information in URL parameters
|
5.9
Medium
|
Jul 11, 2019 |