CVE-2022-35722

IBM Jazz for Service Management is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 231381.

• CWE-79
• CWE-79

• https://exchange.xforce.ibmcloud.com/vulnerabilities/231381VDB Entry, Vendor Advisory
• https://www.ibm.com/support/pages/node/6824117Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/231381VDB Entry, Vendor Advisory
• https://www.ibm.com/support/pages/node/6824117Patch, Vendor Advisory

Published

Sep 28, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-35716IBM UrbanCode Deploy (UCD) 6.2.0.0 through 6.2.7.16, 7.0.0.0…6.5
• CVE-2022-35717"IBM InfoSphere Information Server 11.7 could allow a locall…7.8
• CVE-2022-35719IBM MQ Internet Pass-Thru 2.1, 9.2 LTS and 9.2 CD stores pot…5.5
• CVE-2022-3572A cross-site scripting issue has been discovered in GitLab C…6.1
• CVE-2022-35720IBM Sterling External Authentication Server 6.1.0 and IBM St…5.5
• CVE-2022-35721IBM Jazz for Service Management 1.1.3 is vulnerable to store…5.4
• CVE-2022-35724It is possible to provide data to be read that leads the rea…7.5
• CVE-2022-35725Authenticated (admin+) Stored Cross-Site Scripting (XSS) vul…4.8
• CVE-2022-35726Broken Authentication vulnerability in yotuwp Video Gallery …9.8
• CVE-2022-35727Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2022-35728In BIG-IP Versions 17.0.x before 17.0.0.1, 16.1.x before 16.…9.8
• CVE-2022-35729Out of bounds read in firmware for OpenBMC in some Intel(R) …7.5