CVE-2021-29831high

CVE-2021-29831: high-severity vulnerability in IBM Jazz for Service Management

Published · Updated

Follow this CVE+ Monitor Jazz for Service Management

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.1epss 1.5%
IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 204775.
CVSS:3.0/AV:N/A:L/C:H/UI:N/PR:L/S:U/I:N/AC:L/RL:O/E:U/RC:C
Affected products
IBM · Jazz for Service Management
Related CVEs — IBM Jazz for Service Management

In the same product, most dangerous first.

CVE-2019-4193MEDIUMCVE-2019-4193EPSS 2.1%CVE-2019-4186MEDIUMCVE-2019-4186EPSS 1.6%CVE-2019-4194MEDIUMCVE-2019-4194EPSS 1.3%CVE-2019-4201HIGHCVE-2019-4201EPSS 1.0%CVE-2022-35721MEDIUMCVE-2022-35721EPSS 0.7%CVE-2019-4718MEDIUMCVE-2019-4718EPSS 0.7%