12 results (0.009 seconds)

CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0

CVE-2021-29856

https://notcve.org/view.php?id=CVE-2021-29856

20 Sep 2021 — IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 could allow an authenticated usre to cause a denial of service through the WebGUI Map Creation page. IBM X-Force ID: 205685. IBM Tivoli Netcool/OMNIbus_GUI versión 8.1.0, podría permitir a un usuario autenticado causar una denegación de servicio mediante la página de creación de mapas de WebGUI. IBM X-Force ID: 205685 • https://exchange.xforce.ibmcloud.com/vulnerabilities/205685 •

CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 0

CVE-2021-29821

https://notcve.org/view.php?id=CVE-2021-29821

20 Sep 2021 — IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 204348. IBM Jazz for Service Management e IBM Tivoli Netcool/OMNIbus_GUI versión 8.1.0, son vulnerables a un ataque de tipo cross-site scripting. Esta vulnerabilidad permite a usuarios inser... • https://exchange.xforce.ibmcloud.com/vulnerabilities/204348 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 0

CVE-2021-29820

https://notcve.org/view.php?id=CVE-2021-29820

20 Sep 2021 — IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 204347. IBM Jazz for Service Management e IBM Tivoli Netcool/OMNIbus_GUI versión 8.1.0, son vulnerables a un ataque de tipo cross-site scripting. Esta vulnerabilidad permite a usuarios inser... • https://exchange.xforce.ibmcloud.com/vulnerabilities/204347 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 0

CVE-2021-29819

https://notcve.org/view.php?id=CVE-2021-29819

20 Sep 2021 — IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 204346. IBM Jazz for Service Management e IBM Tivoli Netcool/OMNIbus_GUI versión 8.1.0, son vulnerables a un ataque de tipo cross-site scripting. Esta vulnerabilidad permite a usuarios inser... • https://exchange.xforce.ibmcloud.com/vulnerabilities/204346 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 0

CVE-2021-29818

https://notcve.org/view.php?id=CVE-2021-29818

20 Sep 2021 — IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 204345. IBM Jazz for Service Management e IBM Tivoli Netcool/OMNIbus_GUI versión 8.1.0, son vulnerables a un ataque de tipo cross-site scripting. Esta vulnerabilidad permite a usuarios inser... • https://exchange.xforce.ibmcloud.com/vulnerabilities/204345 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 0

CVE-2021-29817

https://notcve.org/view.php?id=CVE-2021-29817

20 Sep 2021 — IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 204343. IBM Jazz for Service Management e IBM Tivoli Netcool/OMNIbus_GUI versión 8.1.0, son vulnerables a un ataque de tipo cross-site scripting. Esta vulnerabilidad permite a usuarios inser... • https://exchange.xforce.ibmcloud.com/vulnerabilities/204343 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 4.9EPSS: 0%CPEs: 1EXPL: 0

CVE-2021-29811

https://notcve.org/view.php?id=CVE-2021-29811

20 Sep 2021 — IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 stores user credentials in plain clear text which can be read by an authenticated admin user. IBM X-Force ID: 204329. IBM Jazz for Service Management e IBM Tivoli Netcool/OMNIbus_GUI versión 8.1.0, almacenan las credenciales de usuario en texto sin cifrar que puede leer un usuario administrador autenticado. IBM X-Force ID: 204329 • https://exchange.xforce.ibmcloud.com/vulnerabilities/204329 • CWE-522: Insufficiently Protected Credentials •

CVSS: 6.4EPSS: 0%CPEs: 1EXPL: 0

CVE-2021-29809

https://notcve.org/view.php?id=CVE-2021-29809

20 Sep 2021 — IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 204270. IBM Jazz for Service Management e IBM Tivoli Netcool/OMNIbus_GUI versión 8.1.0, son vulnerables a un ataque de tipo cross-site scripting almacenado. Esta vulnerabilidad permit... • https://exchange.xforce.ibmcloud.com/vulnerabilities/204270 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.4EPSS: 0%CPEs: 1EXPL: 0

CVE-2021-29808

https://notcve.org/view.php?id=CVE-2021-29808

20 Sep 2021 — IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 204269. IBM Jazz for Service Management e IBM Tivoli Netcool/OMNIbus_GUI versión 8.1.0, son vulnerables a un ataque de tipo cross-site scripting almacenado. Esta vulnerabilidad permit... • https://exchange.xforce.ibmcloud.com/vulnerabilities/204269 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.4EPSS: 0%CPEs: 1EXPL: 0

CVE-2021-29807

https://notcve.org/view.php?id=CVE-2021-29807

20 Sep 2021 — IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 204265. IBM Jazz for Service Management e IBM Tivoli Netcool/OMNIbus_GUI versión 8.1.0, son vulnerables a un ataque de tipo cross-site scripting almacenado. Esta vulnerabilidad permit... • https://exchange.xforce.ibmcloud.com/vulnerabilities/204265 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •