| CVE-2025-36249 |
IBM Jazz for Service Management 1.1.3.0 through 1.1.3.25 does not set the secure attribute on authorization tokens or…
|
3.7
Faible
|
31 oct. 2025 |
| CVE-2025-36011 |
IBM Jazz for Service Management 1.1.3.0 through 1.1.3.24 does not set the secure attribute on authorization tokens or…
|
4.3
Moyenne
|
9 sept. 2025 |
| CVE-2024-52892 |
IBM Jazz for Service Management 1.1.3 through 1.1.3.23 is vulnerable to cross-site scripting
|
6.1
Moyenne
|
6 févr. 2025 |
| CVE-2024-47106 |
IBM Jazz for Service Management 1.1.3 through 1.1.3.22 could allow a remote attacker to obtain sensitive information…
|
5.3
Moyenne
|
18 janv. 2025 |
| CVE-2023-46186 |
IBM Jazz for Service Management 1.1.3.20 could allow an unauthorized user to obtain sensitive file information using…
|
5.3
Moyenne
|
14 févr. 2024 |
| CVE-2022-35722 |
IBM Jazz for Service Management is vulnerable to stored cross-site scripting
|
6.4
Moyenne
|
28 sept. 2022 |
| CVE-2022-35721 |
IBM Jazz for Service Management 1.1.3 is vulnerable to stored cross-site scripting
|
6.4
Moyenne
|
23 sept. 2022 |
| CVE-2021-38877 |
IBM Jazz for Service Management 1.1.3.10 is vulnerable to stored cross-site scripting
|
6.4
Moyenne
|
23 sept. 2021 |
| CVE-2021-29905 |
IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to cross-site scripting
|
5.4
Moyenne
|
23 sept. 2021 |
| CVE-2021-29904 |
IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI displays user credentials in plain clear…
|
6.2
Moyenne
|
23 sept. 2021 |
| CVE-2021-29833 |
IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to stored cross-site scripting
|
6.4
Moyenne
|
23 sept. 2021 |
| CVE-2021-29832 |
IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to stored cross-site scripting
|
6.4
Moyenne
|
23 sept. 2021 |
| CVE-2021-29816 |
IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to cross-site request…
|
4.3
Moyenne
|
23 sept. 2021 |
| CVE-2021-29815 |
IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to stored cross-site scripting
|
6.4
Moyenne
|
23 sept. 2021 |
| CVE-2021-29814 |
IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to stored cross-site scripting
|
6.4
Moyenne
|
23 sept. 2021 |
| CVE-2021-29813 |
IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to stored cross-site scripting
|
6.4
Moyenne
|
23 sept. 2021 |
| CVE-2021-29812 |
IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to stored cross-site scripting
|
6.4
Moyenne
|
23 sept. 2021 |
| CVE-2021-29810 |
IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to stored cross-site scripting
|
6.4
Moyenne
|
23 sept. 2021 |
| CVE-2021-29800 |
IBM Tivoli Netcool/OMNIbus_GUI and IBM Jazz for Service Management 1.1.3.10 is vulnerable to stored cross-site scripting
|
6.4
Moyenne
|
23 sept. 2021 |
| CVE-2021-29831 |
IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to an XML External Entity…
|
7.1
Élevée
|
21 sept. 2021 |
| CVE-2019-4718 |
IBM Jazz for Service Management 3.13 is vulnerable to cross-site scripting
|
5.4
Moyenne
|
23 mars 2020 |
| CVE-2019-4186 |
IBM Jazz for Service Management 1.1.3 is vulnerable to HTTP header injection, caused by incorrect trust in the HTTP Host…
|
5.3
Moyenne
|
5 sept. 2019 |
| CVE-2019-4275 |
IBM Jazz for Service Management 1.1.3, 1.1.3.1, and 1.1.3.2 could allow an unauthorized local user to create unique…
|
6.2
Moyenne
|
2 août 2019 |
| CVE-2019-4194 |
IBM Jazz for Service Management 1.1.3, 1.1.3.1, and 1.1.3.2 is missing function level access control that could allow…
|
5.3
Moyenne
|
17 juil. 2019 |
| CVE-2019-4193 |
IBM Jazz for Service Management 1.1.3 and 1.1.3.2 stores sensitive information in URL parameters
|
5.9
Moyenne
|
11 juil. 2019 |