CVE-2019-4718

IBM Jazz for Service Management 3.13 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 172123.

• CWE-79

• https://exchange.xforce.ibmcloud.com/vulnerabilities/172123VDB Entry, Vendor Advisory
• https://www.ibm.com/support/pages/node/6113470Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/172123VDB Entry, Vendor Advisory
• https://www.ibm.com/support/pages/node/6113470Patch, Vendor Advisory

Published

Mar 23, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-4705IBM Security Identity Manager Virtual Appliance 7.0.2 disclo…2.7
• CVE-2019-4706IBM Security Identity Manager Virtual Appliance 7.0.2 writes…2.7
• CVE-2019-4707IBM Security Access Manager Appliance 9.0.7.0 is vulnerable …7.1
• CVE-2019-4713IBM Security Guardium Data Encryption (GDE) 3.0.0.2 could al…8.8
• CVE-2019-4715IBM Spectrum Scale 4.2 and 5.0 could allow a remote authenti…8.8
• CVE-2019-4716IBM Planning Analytics 2.0.0 through 2.0.8 is vulnerable to …9.8
• CVE-2019-4719IBM MQ and IBM MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS,…5.5
• CVE-2019-4720IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is v…7.5
• CVE-2019-4722IBM Cognos Analytics 11.0 and 11.1 could allow a remote atta…4.3
• CVE-2019-4723IBM Cognos Analytics 11.0 and 11.1 could allow a remote atta…7.5
• CVE-2019-4724IBM Cognos Analytics 11.0 and 11.1 could allow a remote atta…7.5
• CVE-2019-4725IBM Security Access Manager Appliance 9.0 is vulnerable to c…6.1