Skip to content
OpenAdvisories
Medium · 6.4 CVE-2022-35721 EUVD-2022-38596GHSA-6r33-cjf7-78gm

IBM Jazz for Service Management 1.1.3 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary Java…

Published Sep 23, 2022 · Updated May 22, 2025 · Assigned by ibm

Vendor: IBM Product: Jazz for Service Management

Description

IBM Jazz for Service Management 1.1.3 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 231380.

Affected products

VendorProductAffectedFixed
IBM Jazz for Service Management 1.1.3 —

References