Cross site scripting

2016-07-0801:59:00

PRIOn knowledge base

www.prio-n.com

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.9%

JSON

Cross-site scripting (XSS) vulnerability in the Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-0313 and CVE-2016-0350.

CPENameOperatorVersion
jazz_reporting_serviceeq5.0.2
jazz_reporting_serviceeq6.0
jazz_reporting_serviceeq6.0.1
jazz_reporting_serviceeq5.0
jazz_reporting_serviceeq5.0.1