CVE-2019-4194medium

CVE-2019-4194: medium-severity vulnerability in IBM Jazz for Service Management

Published · Updated

Follow this CVE+ Monitor Jazz for Service Management

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.3epss 1.3%
IBM Jazz for Service Management 1.1.3, 1.1.3.1, and 1.1.3.2 is missing function level access control that could allow a user to delete authorized resources. IBM X-Force ID: 159033.
CVSS:3.0/UI:N/AC:L/S:U/AV:N/PR:N/C:N/A:L/I:N/E:U/RC:C/RL:O
Affected products
IBM · Jazz for Service Management
Related CVEs — IBM Jazz for Service Management

In the same product, most dangerous first.

CVE-2019-4193MEDIUMCVE-2019-4193EPSS 2.1%CVE-2019-4186MEDIUMCVE-2019-4186EPSS 1.6%CVE-2021-29831HIGHCVE-2021-29831EPSS 1.5%CVE-2019-4201HIGHCVE-2019-4201EPSS 1.0%CVE-2022-35721MEDIUMCVE-2022-35721EPSS 0.7%CVE-2019-4718MEDIUMCVE-2019-4718EPSS 0.7%