Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:jazz_for_service_management:1.1.3.10:*:*:*:*:*:*:*

part: a version: 1.1.3.10 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductJazz For Service Management (2b965237-2c9b-58af-a0e7-43b3e392a051)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-38877 vulnerable 2026-06-08 05:33:48.471363 Details available
MEDIUM (6.4)
IBM Jazz for Service Management 1.1.3.10 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 208405.
Published: 2021-09-23T18:05:51.826Z
Updated: 2024-09-16T23:21:58.808Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29905 vulnerable 2026-06-08 05:31:27.207842 Details available
MEDIUM (5.4)
IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 207616.
Published: 2021-09-23T18:05:50.185Z
Updated: 2024-09-17T01:42:05.618Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29904 vulnerable 2026-06-08 05:31:27.207319 Details available
MEDIUM (6.2)
IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI displays user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 207610.
Published: 2021-09-23T18:05:48.587Z
Updated: 2024-09-16T20:22:33.631Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29833 vulnerable 2026-06-08 05:31:27.063927 Details available
MEDIUM (6.4)
IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 204825.
Published: 2021-09-23T18:05:46.993Z
Updated: 2024-09-16T22:55:55.194Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29832 vulnerable 2026-06-08 05:31:27.063364 Details available
MEDIUM (6.4)
IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 204824.
Published: 2021-09-23T18:05:45.366Z
Updated: 2024-09-17T00:26:24.973Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29831 vulnerable 2026-06-08 05:31:27.055669 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29816 vulnerable 2026-06-08 05:31:27.050429 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29815 vulnerable 2026-06-08 05:31:27.049920 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29814 vulnerable 2026-06-08 05:31:27.049392 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29813 vulnerable 2026-06-08 05:31:27.048774 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29812 vulnerable 2026-06-08 05:31:27.048041 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29810 vulnerable 2026-06-08 05:31:27.047073 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29800 vulnerable 2026-06-08 05:31:27.038346 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.