CVE-2026-115554: Tivoli Netcool/OMNIbus Web GUI is vulnerable to stored cross-site scripting
Published Nov 6, 2026
·Updated
IBM Tivoli Netcool/OMNIbus 8.1.0 through 8.1.0.41 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Other sources
IBM Tivoli Netcool/OMNIbus is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
— IBM
Affected Software
1 affected component
IBM Tivoli Netcool/OMNIbus_GUI<=8.1.0 to 8.1.0.41
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Tivoli Netcool/OMNIbusto a version that resolves this vulnerability.Patch Fix Pack 42
Event History
Nov 6, 2026
CVE Published
via IBM·12:00 AM
Data Sourced
via IBM·12:00 AM
DescriptionAffected Software
Nov 8, 2026
CVE Published
via MITRE·05:03 PM
Data Sourced
via MITRE·05:03 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·05:16 PM
DescriptionSeverityWeakness