530 matches found
CVE-2025-2134 IBM Jazz Reporting Service Denial of Service
IBM Jazz Reporting Service could allow an authenticated user on the network to affect the system's performance using complicated queries due to insufficient resource pooling...
CVE-2025-2134 IBM Jazz Reporting Service Denial of Service
IBM Jazz Reporting Service could allow an authenticated user on the network to affect the system's performance using complicated queries due to insufficient resource pooling...
CVE-2025-2134
IBM Jazz Reporting Service could allow an authenticated user on the network to affect the system's performance using complicated queries due to insufficient resource pooling...
CVE-2025-2134
IBM Jazz Reporting Service (Lifecycle Query Engine, LQE) is affected by CVE-2025-2134. The issue is caused by insufficient resource pooling, allowing an authenticated user on the network to affect system performance through complex queries. Affected versions include IBM Jazz Reporting Service 7.1...
EUVD-2025-206774
IBM Jazz Reporting Service could allow an authenticated user on the host network to obtain sensitive information about other projects that reside on the server...
CVE-2025-27550 IBM Jazz Reporting Service Information Disclosure
IBM Jazz Reporting Service could allow an authenticated user on the host network to obtain sensitive information about other projects that reside on the server...
CVE-2025-1823 IBM Jazz Reporting Service Denial of Service
IBM Jazz Reporting Service could allow an authenticated user on the host network to cause a denial of service using specially crafted SQL query that consumes excess memory resources...
CVE-2025-1823
IBM Jazz Reporting Service (Lifecycle Query Engine) contains CVE-2025-1823: an authenticated user with host-network access can trigger a denial of service by sending a specially crafted SQL query that consumes excessive memory. Affected versions are IBM Jazz Reporting Service 7.1 and 7.0.3 (7.1iF...
EUVD-2025-206776
IBM Jazz Reporting Service could allow an authenticated user on the host network to cause a denial of service using specially crafted SQL query that consumes excess memory resources...
IBM Jazz Reporting Service（JRS） 安全漏洞
The IBM Jazz Reporting Service JRS is a ready-to-use reporting component developed by the American multinational company IBM. This product includes functions such as report generation, data collection, and lifecycle queries. There is a security vulnerability in the IBM Jazz Reporting Service, whi...
PT-2026-5893
Name of the Vulnerable Software and Affected Versions IBM Jazz Reporting Service affected versions not specified Description An authenticated user on the network may impact system performance by submitting complex queries because of inadequate resource pooling. Recommendations At the moment, ther...
PT-2026-5892
Name of the Vulnerable Software and Affected Versions IBM Jazz Reporting Service affected versions not specified Description An authenticated user on the host network can cause a denial of service by using a specially crafted SQL query that consumes excessive memory resources. Recommendations At...
PT-2026-5894
Name of the Vulnerable Software and Affected Versions IBM Jazz Reporting Service affected versions not specified Description An authenticated user on the host network may be able to obtain sensitive information about other projects residing on the server. Recommendations At the moment, there is n...
IBM Jazz Reporting Service（JRS） 安全漏洞
The IBM Jazz Reporting Service JRS is a ready-to-use reporting component developed by the American multinational company International Business Machines, Inc. IBM. This product includes functions such as report generation, data collection, and lifecycle querying. There is a security vulnerability...
CVE-2026-20817 Windows Error Reporting Service Elevation of Privilege Vulnerability
...
Security Bulletin: IBM Jazz Reporting Service is affected by improper access control due to Apache Commons
Summary Apache Commons is used internally by IBM Jazz Reporting Service CVE-2025-48734 Vulnerability Details CVEID:CVE-2025-48734 DESCRIPTION: Improper Access Control vulnerability in Apache Commons. A special BeanIntrospector class was added in version 1.9.2. This can be used to stop attackers...
Security Bulletin: Due to use of Apache Jena SDB, IBM Jazz Reporting Service is affected by a JDBC Deserialisation attack.
Summary Apache Jena SDB is used internally by IBM Jazz Reporting Service CVE-2022-45136. Vulnerability Details CVEID:CVE-2022-45136 DESCRIPTION: Apache Jena SDB 3.17.0 and earlier is vulnerable to a JDBC Deserialisation attack if the attacker is able to control the JDBC URL used or cause the...
Security Bulletin: The OWASP Java HTML Sanitizer Vulnerability Affects IBM Jazz Reporting Service.
Summary A vulnerability in the OWASP Java HTML Sanitizer, present in versions prior to 20211018.1, may result in incomplete enforcement of sanitization policies for specific HTML elements. This issue affects IBM® Jazz Reporting Service and has been addressed as documented in the Remediation secti...
Security Bulletin: IBM Jazz Reporting Service is vulnerable to uncontrolled resource consumption in Apache Commons IO.
Summary A vulnerability has been identified in the Apache Commons IO library. This issue affects IBM® Jazz Reporting Service and has been addressed as documented in the Remediation section CVE-2024-47554. Vulnerability Details CVEID:CVE-2024-47554 DESCRIPTION: Uncontrolled Resource Consumption...