Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ibm jazz reporting service 5.0.1 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2016-2888
Cross-site scripting (XSS) vulnerability in the Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x prior to 5.0.2 ifix016 and 6.x prior to 6.0.1 ifix005 allows remote authenticated users to inject arbitrary web script or HTML via a crafted ...
Ibm Jazz Reporting Service 6.0.1Ibm Jazz Reporting Service 6.0Ibm Jazz Reporting Service 5.0.2Ibm Jazz Reporting Service 5.0.1Ibm Jazz Reporting Service 5.0
3.5
CVSSv2
CVE-2016-0313
Cross-site scripting (XSS) vulnerability in the Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x prior to 5.0.2 ifix016 and 6.x prior to 6.0.1 ifix005 allows remote authenticated users to inject arbitrary web script or HTML via a crafted ...
Ibm Jazz Reporting Service 5.0.2Ibm Jazz Reporting Service 5.0Ibm Jazz Reporting Service 6.0.1Ibm Jazz Reporting Service 6.0Ibm Jazz Reporting Service 5.0.1
4
CVSSv2
CVE-2016-0314
The Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x prior to 5.0.2 ifix016 and 6.x prior to 6.0.1 ifix005 allow remote authenticated users to conduct clickjacking attacks via unspecified vectors.
Ibm Jazz Reporting Service 6.0.1Ibm Jazz Reporting Service 5.0Ibm Jazz Reporting Service 6.0Ibm Jazz Reporting Service 5.0.2Ibm Jazz Reporting Service 5.0.1
6.5
CVSSv2
CVE-2016-0315
The Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x prior to 5.0.2 ifix016 and 6.x prior to 6.0.1 ifix005 maintain session ID validity after a logout action, which allows remote authenticated users to hijack sessions by leveraging an una...
Ibm Jazz Reporting Service 6.0.1Ibm Jazz Reporting Service 5.0.2Ibm Jazz Reporting Service 5.0Ibm Jazz Reporting Service 6.0Ibm Jazz Reporting Service 5.0.1
3.5
CVSSv2
CVE-2016-0350
Cross-site scripting (XSS) vulnerability in the Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x prior to 5.0.2 ifix016 and 6.x prior to 6.0.1 ifix005 allows remote authenticated users to inject arbitrary web script or HTML via a crafted ...
Ibm Jazz Reporting Service 5.0Ibm Jazz Reporting Service 6.0Ibm Jazz Reporting Service 5.0.1Ibm Jazz Reporting Service 6.0.1Ibm Jazz Reporting Service 5.0.2
6.8
CVSSv2
CVE-2016-2889
Cross-site request forgery (CSRF) vulnerability in the Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x prior to 5.0.2 ifix016, 6.0 and 6.0.1 prior to 6.0.1 ifix005, and 6.0.2 before ifix002 allows remote authenticated users to hijack the...
Ibm Jazz Reporting Service 5.0.1Ibm Jazz Reporting Service 5.0Ibm Jazz Reporting Service 6.0.2Ibm Jazz Reporting Service 6.0.1Ibm Jazz Reporting Service 6.0Ibm Jazz Reporting Service 5.0.2
4
CVSSv2
CVE-2016-5898
IBM Jazz Reporting Service (JRS) could allow a remote malicious user to obtain sensitive information, caused by not restricting JSON serialization. By sending a direct request, an attacker could exploit this vulnerability to obtain sensitive information.
Ibm Jazz Reporting Service 6.0Ibm Jazz Reporting Service 6.0.1Ibm Jazz Reporting Service 6.0.2Ibm Jazz Reporting Service 5.0.1Ibm Jazz Reporting Service 5.0Ibm Jazz Reporting Service 5.0.2
3.5
CVSSv2
CVE-2016-5899
IBM Jazz Reporting Service (JRS) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Ibm Jazz Reporting Service 5.0Ibm Jazz Reporting Service 6.0Ibm Jazz Reporting Service 6.0.1Ibm Jazz Reporting Service 6.0.2Ibm Jazz Reporting Service 5.0.1Ibm Jazz Reporting Service 5.0.2
3.5
CVSSv2
CVE-2016-6054
IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Ibm Jazz Reporting Service 6.0Ibm Jazz Reporting Service 6.0.1Ibm Jazz Reporting Service 6.0.2Ibm Jazz Reporting Service 5.0.1Ibm Jazz Reporting Service 5.0Ibm Jazz Reporting Service 5.0.2
3.5
CVSSv2
CVE-2017-1750
IBM Jazz Reporting Service (JRS) 5.0 up to and including 5.0.2 and 6.0 up to and including 6.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to...
Ibm Jazz Reporting Service 5.0.2Ibm Jazz Reporting Service 6.0.1Ibm Jazz Reporting Service 5.0Ibm Jazz Reporting Service 6.0.2Ibm Jazz Reporting Service 6.0.3Ibm Jazz Reporting Service 6.0.4Ibm Jazz Reporting Service 6.0.5Ibm Jazz Reporting Service 5.0.1Ibm Jazz Reporting Service 6.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322CVE-2006-4304wirelessCVE-2023-23022local file inclusionCVE-2024-27058CVE-2024-33820open redirectCVE-2024-27079
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook