IBM Tivoli Netcool/OMNIbus versions 8.1.0 through 8.1.0.41 contain a stored cross-site scripting (XSS) vulnerability. This flaw allows an authenticated user to inject arbitrary JavaScript code into the web user interface, which can alter the intended functionality and potentially lead to credential disclosure within a trusted session.