IBM Jazz Reporting Service Cross-Site Scripting Vulnerability (CNVD-2022-28800)

IBM Jazz Reporting Service helps you quickly and easily integrate data from various data sources across your tools and projects, and provides a set of off-the-shelf reports for sharing information about lifecycle management projects. The vulnerability can be exploited to embed arbitrary JavaScript code in the Web UI to alter the intended functionality, resulting in the disclosure of credentials in a trusted session.