2141 matches found
CVE-2017-1157
IBM Jazz Reporting Service (JRS) 5.0/6.0 is affected by CVE-2017-1157, allowing an authenticated attacker to access report data restricted to authorized users. Affected products include Jazz Reporting Service integrated with Rational Insight/RRDI (5.0.x and 6.0.x lines). Remediation is available ...
CVE-2017-1157
IBM Jazz Reporting Service JRS 5.0 and 6.0 could allow an authenticated attacker to access report data that should be restricted to authorized users. IBM X-Force ID: 122788...
CVE-2017-1096
CVE-2017-1096 affects IBM Jazz Reporting Service (JRS) 5.0 and 6.0. It is a cross-site scripting vulnerability in the Web UI that could allow an authenticated user to embed arbitrary JavaScript, potentially leading to credential disclosure within a trusted session. Affected versions include JRS 5...
CVE-2016-9986
IBM Jazz Foundation Reporting Service JRS 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Forc...
CVE-2016-9987
The CVE-2016-9987 entry describes a Cross‑Site Scripting vulnerability in IBM Jazz Foundation Reporting Service (JRS) present in JRS 5.0 and 6.0 (component of Rational Insight/RRDI). The vulnerability allows embedding arbitrary JavaScript in the Web UI, potentially altering functionality and enab...
CVE-2016-9987
IBM Jazz Foundation Reporting Service JRS 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Forc...
CVE-2016-9700
IBM Jazz Foundation could allow an authenticated attacker to obtain sensitive information from error message stack traces. IBM X-Force ID: 119528...
CVE-2016-9700
IBM CVE-2016-9700 (IBM Jazz Foundation) enables an authenticated attacker to obtain sensitive information from error message stack traces. Affected products include Rational CLM, RDNG, RELM, RTC, RQM, Rhapsody DM, RSA DM, and Rational software architecture components, with versions ranging in CLM...
IBM Jazz Reporting Service Information Disclosure Vulnerability (CNVD-2017-15929)
IBM Jazz Reporting Service JRS is a suite of IBM USA applications for discovering cross-project reports that can be used in integration with IBM Rational CLM's Rational solution for managing all lifecycles of a development project. CLM users can access reports provided by JRS in dashboards,...
IBM Jazz Reporting Service Cross-Site Scripting Vulnerability (CNVD-2017-15928)
IBM Jazz Reporting Service JRS is a suite of IBM USA applications for discovering cross-project reports that can be used in integration with IBM Rational CLM's Rational solution for managing all lifecycles of a development project. CLM users can access reports provided by JRS in dashboards,...
IBM Jazz Reporting Service Cross-Site Scripting Vulnerability (CNVD-2017-15919)
IBM Jazz Reporting Service JRS is a suite of IBM USA applications for discovering cross-project reports that can be used in integration with IBM Rational CLM's Rational solution for managing all lifecycles of a development project. CLM users can access reports provided by JRS in dashboards,...
IBM Jazz Reporting Service Cross-Site Scripting Vulnerability (CNVD-2017-15917)
IBM Jazz Reporting Service JRS is a suite of IBM USA applications for discovering cross-project reports that can be used in integration with IBM Rational CLM's Rational solution for managing all lifecycles of a development project. CLM users can access reports provided by JRS in dashboards,...
IBM Jazz Reporting Service Cross-Site Scripting Vulnerability (CNVD-2017-15918)
IBM Jazz Reporting Service JRS is a suite of IBM USA applications for discovering cross-project reports that can be used in integration with IBM Rational CLM's Rational solution for managing all lifecycles of a development project. CLM users can access reports provided by JRS in dashboards,...
Multiple IBM Products Jazz Foundation Cross-Site Scripting Vulnerability
IBM Rational Collaborative Lifecycle Management CLM is a collaborative lifecycle management solution from IBM. IBM Rational Quality Manager RQM is a set of IBM's collaborative, Web-based quality management solutions. jazz Foundation is one of the software development collaboration platform. A...
Information Disclosure Vulnerability in Jazz Foundation in Multiple IBM Products
IBM Rational Collaborative Lifecycle Management CLM, etc. are products of IBM Corporation in the U.S. IBM Rational CLM, Rational Team Concert RTC and Rational Engineering Lifecycle Rational CLM, Rational Team Concert RTC and Rational Engineering Lifecycle Manager RELM are all collaborative...
CVE-2016-9973
IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 120209...
CVE-2016-9973
IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 120209...
Stack overflow
IBM Jazz Foundation could expose potentially sensitive information to authenticated users through stack trace error conditions. IBM X-Force ID: 120659...
Cross site scripting
IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 120209...