Cross site scripting

2020-08-1013:15:00

PRIOn knowledge base

www.prio-n.com

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.9%

JSON

IBM Jazz Reporting Service 6.0.2, 6.0.6, 6.0.6.1, 7.0, and 7.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

CPENameOperatorVersion
jazz_reporting_serviceeq6.0.2
jazz_reporting_serviceeq6.0.6
jazz_reporting_serviceeq6.0.6.1
jazz_reporting_serviceeq7.0
jazz_reporting_serviceeq7.0.1