IBM Jazz for Service Management 1.1.3
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:jazz_for_service_management:1.1.3:*:*:*:*:*:*:*
part: a version: 1.1.3 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Jazz For Service Management (2b965237-2c9b-58af-a0e7-43b3e392a051) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-47106 |
vulnerable | 2026-06-08 06:48:11.391411 |
IBM Jazz for Service Management information disclosure
MEDIUM (5.3)
IBM Jazz for Service Management 1.1.3 through 1.1.3.22 could allow a remote attacker to obtain sensitive information from improper access restrictions that could aid in further attacks against the system.
Published: 2025-01-18T16:09:47.381Z
Updated: 2025-01-21T20:51:51.370Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35721 |
vulnerable | 2026-06-08 05:46:05.201116 |
Details available
MEDIUM (6.4)
IBM Jazz for Service Management 1.1.3 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 231380.
Published: 2022-09-23T17:35:16.145Z
Updated: 2025-05-22T18:18:23.672Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-4275 |
vulnerable | 2026-06-08 05:13:57.035171 |
Details available
MEDIUM (6.2)
IBM Jazz for Service Management 1.1.3, 1.1.3.1, and 1.1.3.2 could allow an unauthorized local user to create unique catalog names that could cause a denial of service. IBM X-Force ID: 160296.
Published: 2019-08-02T14:10:12.795Z
Updated: 2024-09-17T03:12:35.165Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-4186 |
vulnerable | 2026-06-08 05:13:56.928449 |
Details available
MEDIUM (5.3)
IBM Jazz for Service Management 1.1.3 is vulnerable to HTTP header injection, caused by incorrect trust in the HTTP Host header during caching. By sending a specially crafted HTTP GET request, a remote attacker could exploit this vulnerability to inject arbitrary HTTP headers, which will allow the attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-force ID: 158976.
Published: 2019-09-05T14:50:15.588Z
Updated: 2024-09-16T16:43:20.348Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-1746 |
vulnerable | 2026-06-08 05:09:22.977803 |
Details available
IBM Jazz for Service Management (IBM Tivoli Components 1.1.3) is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 135519.
Published: 2017-12-20T18:00:00.000Z
Updated: 2024-09-16T20:27:10.937Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-1631 |
vulnerable | 2026-06-08 05:09:22.768214 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-9975 |
not_vulnerable | 2026-06-08 05:08:25.150735 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-5935 |
not_vulnerable | 2026-06-08 05:07:58.140574 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.