IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI Cross-Site Scripting Vulnerability (CNVD-2021-94312)

IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI are both products of IBM Corporation, U.S.A. IBM Jazz for Service Management is an integrated service management product that provides visibility into the service management environment. IBM Tivoli Netcool/OMNIbus_GUI is a graphical user interface for the IBM Tivoli Netcool/OMNIbus service level management system. IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI contain a cross-site scripting vulnerability that vulnerability stems from the lack of effective filtering and escaping of parameters in the Web UI of the software. An attacker could exploit this vulnerability to embed arbitrary JavaScript code in the Web UI.