Lucene search
IBM61B9181EB54A0FEA76BDF465A9DD7A1E27734744F2B1A6386C84D309D1C6CCCDHistoryOct 06, 2021 - 10:11 a.m.
Security Bulletin: Multiple security vulnerabilities have been identified in components shipped with Tivoli Netcool/OMNIbus WebGUI
2021-10-0610:11:06
www.ibm.com
22
0.001 Low
EPSS
Percentile
41.6%
Summary
IBM Jazz for Service Management (JazzSM) and Websphere Application Server (WAS) are shipped as components of Tivoli Netcool/OMNIbus WebGUI. Information about the security vulnerabilities affecting JazzSM and WAS have been published in multiple security bulletins.
Vulnerability Details
Refer to the security bulletin(s) listed in the Remediation/Fixes section
Affected Products and Versions
| Principal Product and Version(s) | Affected Supporting Product and Version |
|---|---|
| WebGUI 8.1.0 GA and FP | Jazz for Service Management v1.1.3.10 |
| WebGUI 8.1.0 GA and FP | Websphere Application Server V8.5 and V9 |
Remediation/Fixes
Please consult the listed security bulletins for vulnerability details and information about the fixes:
- IBM Jazz for Service Management is vulnerable to cross-site request forgery (CVE-2021-29816)
- IBM Jazz for Service Management is vulnerable to stored cross-site scripting (CVE-2021-29800)
- IBM Jazz for Service Management is vulnerable to stored cross-site scripting (CVE-2021-29815)
- IBM Jazz for Service Management is vulnerable to stored cross-site scripting (CVE-2021-29810)
- IBM Jazz for Service Management is vulnerable to stored cross-site scripting (CVE-2021-29812)
- IBM Jazz for Service Management is vulnerable to stored cross-site scripting (CVE-2021-29832)
- IBM Jazz for Service Management is vulnerable to stored cross-site scripting (CVE-2021-29833)
- IBM Jazz for Service Management is vulnerable to stored cross-site scripting (CVE-2021-29813)
- IBM Jazz for Service Management is vulnerable to stored cross-site scripting (CVE-2021-29814)
- WebSphere Application Server is vulnerable to Information Disclosure (CVE-2021-29842)
Workarounds and Mitigations
None
| CPE | Name | Operator | Version |
|---|---|---|---|
| tivoli netcool/omnibus | eq | 8.1.0 |
Related
cnvd
cnvd
cve
cve
nvd
nvd
ibm
ibm
prion
prion
Cross site scripting
2021-09-23 18:15:00
Cross site scripting
2021-09-23 18:15:00
Cross site scripting
2021-09-23 18:15:00
cvelist
cvelist
nessus
nessus
IBM WebSphere Application Server Information Disclosure (6489485)
2021-09-23 00:00:00
0.001 Low
EPSS
Percentile
41.6%
Related for 61B9181EB54A0FEA76BDF465A9DD7A1E27734744F2B1A6386C84D309D1C6CCCD