Skip to content
OpenAdvisories
Medium · 6.4 CVE-2022-35722 EUVD-2022-38597GHSA-chv5-2f3c-f6gx

IBM Jazz for Service Management is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript…

Published Sep 28, 2022 · Updated May 20, 2025 · Assigned by ibm

Vendor: IBM Product: Jazz for Service Management

Description

IBM Jazz for Service Management is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 231381.

Affected products

VendorProductAffectedFixed
IBM Jazz for Service Management 1.1.3 —

References