PT-2025-35944 · Ibm · Ibm Jazz Foundation

Published 2025-09-04 · Updated 2026-01-09 · CVE-2024-43184

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions IBM Jazz Foundation versions 7.0.2 through 7.0.2 iFix033 IBM Jazz Foundation versions 7.0.3 through 7.0.3 iFix012 IBM Jazz Foundation versions 7.1.0 through 7.1.0 iFix002

Description The software is susceptible to cross-site scripting (XSS). This allows an unauthenticated attacker to embed arbitrary JavaScript code into the Web UI, potentially altering functionality and leading to credentials disclosure within a trusted session.

Recommendations Update IBM Jazz Foundation to a version beyond 7.0.2 iFix033. Update IBM Jazz Foundation to a version beyond 7.0.3 iFix012. Update IBM Jazz Foundation to a version beyond 7.1.0 iFix002.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-43184

Affected Products

Ibm Jazz Foundation

References · 7

• https://osv.dev/vulnerability/CVE-2024-43184 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-43184 · Security Note
• https://t.me/cveNotify/144565 · Telegram Post
• https://t.me/cveNotify/148170 · Telegram Post
• https://twitter.com/CVEnew/status/1963644664910692380 · Twitter Post
• https://ibm.com/support/pages/node/7244013 · Patch, Vendor Advisory
• https://t.me/cveNotify/134272 · Telegram Post