ibm jazz-for-service-management CVE-2021-29831 vulnerability in IBM Products
Published on September 21, 2021

IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 204775.

NVD


Products Associated with CVE-2021-29831

stack.watch emails you whenever new vulnerabilities are published in IBM Jazz For Service Management or IBM Tivoli Netcoolomnibus Gui. Just hit a watch button to start following.

IBM Jazz For Service Management
 
IBM Tivoli Netcoolomnibus Gui
 

Affected Versions

IBM Jazz for Service Management Version 1.1.3.10 is affected by CVE-2021-29831

Exploit Probability

EPSS
0.66%
Percentile
70.90%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.