Show filters
45 Total Results
Displaying 11-20 of 45
Sort by:
Attacker Value
Unknown

CVE-2019-4047

Disclosure Date: April 29, 2019 (last updated November 27, 2024)
IBM Jazz Reporting Service (JRS) 6.0.6 could allow an authenticated user to access the execution log files as a guest user, and obtain the information of the server execution. IBM X-Force ID: 156243.
Attacker Value
Unknown

CVE-2018-1363

Disclosure Date: April 25, 2018 (last updated November 26, 2024)
IBM Jazz Reporting Service (JRS) 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 137448.
0
Attacker Value
Unknown

CVE-2017-1750

Disclosure Date: April 25, 2018 (last updated November 26, 2024)
IBM Jazz Reporting Service (JRS) 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 135523.
0
Attacker Value
Unknown

CVE-2017-1340

Disclosure Date: November 01, 2017 (last updated November 26, 2024)
IBM Jazz Reporting Service (JRS) 6.0.4 could allow an authenticated user to obtain information on another server that the current report builder interacts with. IBM X-Force ID: 126455.
0
Attacker Value
Unknown

CVE-2017-1490

Disclosure Date: September 14, 2017 (last updated November 26, 2024)
An unspecified vulnerability in the Lifecycle Query Engine of Jazz Reporting Service 6.0 through 6.0.4 could disclose highly sensitive information.
0
Attacker Value
Unknown

CVE-2017-1370

Disclosure Date: July 31, 2017 (last updated November 26, 2024)
IBM Jazz Reporting Service (JRS) 5.0 and 6.0 could disclose sensitive information, including user credentials, through an error message from the Report Builder administrator configuration page. IBM X-Force ID: 126863.
0
Attacker Value
Unknown

CVE-2016-9986

Disclosure Date: July 05, 2017 (last updated November 26, 2024)
IBM Jazz Foundation Reporting Service (JRS) 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 120552.
0
Attacker Value
Unknown

CVE-2017-1096

Disclosure Date: July 05, 2017 (last updated November 26, 2024)
IBM Jazz Reporting Service (JRS) 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 120656.
0
Attacker Value
Unknown

CVE-2016-9989

Disclosure Date: July 05, 2017 (last updated November 26, 2024)
IBM Jazz Foundation Reporting Service (JRS) 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 120555.
0
Attacker Value
Unknown

CVE-2016-9988

Disclosure Date: July 05, 2017 (last updated November 26, 2024)
IBM Jazz Foundation Reporting Service (JRS) 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 120554.
0