jazz_for_service_management vulnerabilities

CVEs whose affected-version data names the jazz_for_service_management package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2025-36249Low· 3.7

11mo ago

IBM Jazz for Service Management 1.1.3.0 through 1.1.3.25 does not set the secure attribute on authorization tokens or session cookies

IBM Jazz for Service Management 1.1.3.0 through 1.1.3.25 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this…

▾ Sunlitibm · jazz_for_service_managementEPSS 0.16%via NVD