CVE-2026-115554 · Vendor
NO FIX YET
IBM Tivoli Netcool/OMNIbus 8.1.0 through 8.1.0.41 has a stored cross-site scripting flaw in its Web UI. An authenticated user can embed JavaScript that runs in other users' trusted sessions and can lead to credential disclosure.
first public Nov 8, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Teams running IBM Tivoli Netcool/OMNIbus 8.1.0 through 8.1.0.41 with the Web UI enabled. The attacker needs an authenticated account on the Web UI, and the injected script runs for other users who view the stored content. Installations outside that version range, or without the Web UI, are not covered by the sources.
Not affected if outside-affected-versions, web-ui-not-used
Who cares ibm, netcool-omnibus, tivoli, web-ui
8.1.0 and 8.1.0.41 (the version string is unknown from the sources; check the IBM product documentation for your installation)No fix yet, per the sources.
IBM Tivoli Netcool/OMNIbus 8.1.0 through 8.1.0.41 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
This page as .md · .json · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.