Threats affecting pkg:maven/com.ibm/tivoli-netcoolomnibus

IBM Tivoli Netcool/OMNIbus versions 8.1.0 through 8.1.0.41 contain a stored cross-site scripting (XSS) vulnerability. This flaw allows an authenticated user to inject arbitrary JavaScript code into the web user interface, potentially altering its functionality and leading to credential disclosure within a trusted session. The vulnerability requires low attack complexity and privileges but no user interaction. It has a CVSS 3.1 base score of 6.4, indicating medium severity.