Cross site scripting

IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

Cross site scripting

IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

Information disclosure

IBM Jazz Reporting Service JRS could allow a remote attacker to obtain sensitive information, caused by not restricting JSON serialization. By sending a direct request, an attacker could exploit this vulnerability to obtain sensitive information...

Cross site scripting

IBM Jazz Reporting Service JRS is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

Cross site scripting

IBM Jazz Reporting Service JRS is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

Design/Logic Flaw

IBM Jazz Foundation could allow an authenticated user to take over a previously logged in user due to session expiration not being enforced...

Design/Logic Flaw

IBM Jazz Reporting Service JRS is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site...

Code injection

IBM Jazz technology based products might allow an attacker to view work item titles that they do not have privilege to view...

Cross site scripting

IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2016-6039

CVE-2016-6039 affects IBM Jazz Reporting Service (JRS) via cross-site scripting in the Web UI. According to IBM’s Security Bulletin for the Lifecycle Query Engine shipped with JRS, the vulnerability enables an attacker to embed arbitrary JavaScript in the UI, potentially leading to credential dis...

CVE-2016-5898

IBM Jazz Reporting Service JRS could allow a remote attacker to obtain sensitive information, caused by not restricting JSON serialization. By sending a direct request, an attacker could exploit this vulnerability to obtain sensitive information...

CVE-2016-5899

IBM Jazz Reporting Service JRS is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2016-6039

IBM Jazz Reporting Service JRS is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2016-6047

IBM Jazz Reporting Service JRS is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2016-6061

The CVE-2016-6061 entry maps to IBM Jazz Foundation and is confirmed as a cross-site scripting vulnerability in the Jazz Web UI. The IBM Security Bulletin details multiple CLM-related products affected (Rational Collaborative Lifecycle Management, Rational Team Concert, Rational Quality Manager, ...

CVE-2016-5898

CVE-2016-5898 affects IBM Jazz Reporting Service (JRS) shipped with Rational Insight/RRDI. The vulnerability arises from not restricting JSON serialization, enabling a remote attacker to obtain sensitive information via a direct request. Affects JRS versions 5.0, 5.0.1, 5.0.2 and 6.0 (RRDI/Ration...

CVE-2016-6030

Concrete details found: CVE-2016-6030 affects IBM Jazz Foundation (Jazz/CLM family). The vulnerability is a cross-site scripting flaw in the Web UI that can let an attacker embed arbitrary JavaScript code, potentially leading to credentials disclosure within a trusted session. Affected products/v...

CVE-2016-6040

The CVE-2016-6040 issue affects IBM Jazz Foundation within IBM Jazz-based CLM/Rational products. An authenticated user could take over a previously logged-in user because session expiration is not enforced. Affected products include Rational CLM 4.0–6.0.2, Rational Team Concert, Rational Quality ...

CVE-2016-6047

The CVE-2016-6047 entry concerns IBM Jazz Reporting Service (JRS). The connected IBM bulletins confirm this vulnerability is a cross-site scripting flaw in JRS (UI), capable of embedded arbitrary JavaScript and potentially leading to credential disclosure within a trusted session. Affected produc...

CVE-2016-5899

CVE-2016-5899: IBM Jazz Reporting Service (JRS) is vulnerable to cross-site scripting in the Web UI. Affected Jazz Reporting Service versions: 5.0, 5.0.1, 5.0.2, 6.0, 6.0.1, and 6.0.2. The issue stems from JRS allowing arbitrary JavaScript execution via user input in the UI, potentially leading t...