CVE-2023-46186

Description

References

• exchange.xforce.ibmcloud.com/vulnerabilities/269929 · VDB Entry
• ibm.com/support/pages/node/7116830 · Vendor Advisory

More vulnerabilities in jazz for service management

• CVE-2025-36249MEDIUM 5.3IBM Jazz for Service Management 1.1.3.0 through 1.1.3.25 does not set the secure attribute on authorization tokens or session cookies. Attac…
• CVE-2025-36011MEDIUM 4.3IBM Jazz for Service Management 1.1.3.0 through 1.1.3.24 does not set the secure attribute on authorization tokens or session cookies. Attac…
• CVE-2024-52892MEDIUM 6.1IBM Jazz for Service Management 1.1.3 through 1.1.3.23 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated a…
• CVE-2024-47106HIGH 7.5IBM Jazz for Service Management 1.1.3 through 1.1.3.22 could allow a remote attacker to obtain sensitive information from improper access re…
• CVE-2022-35722MEDIUM 5.4IBM Jazz for Service Management is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript …