Lucene search
+L

651 matches found

CNVD
CNVD
•added 2021/02/19 12:00 a.m.•50 views

IBM Jazz Reporting Service Cross-Site Scripting Vulnerability (CNVD-2021-11047)

IBM Jazz Reporting Service helps you quickly and easily integrate data from a variety of data sources across your tools and projects, and provides a set of ready-to-use reports for sharing information about your lifecycle management projects. A cross-site scripting vulnerability exists in IBM Jaz...

5.4CVSS5.9AI score0.00557EPSS
SaveExploits0References1
OSV
OSV
•added 2021/02/18 3:15 p.m.•13 views

CVE-2020-4933

IBM Jazz Reporting Service 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

5.4CVSS5.1AI score0.00557EPSS
SaveExploits0References2
NVD
NVD
•added 2021/02/18 3:15 p.m.•34 views

CVE-2020-4933

IBM Jazz Reporting Service 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

5.4CVSS0.00557EPSS
SaveExploits0References2
Prion
Prion
•added 2021/02/18 3:15 p.m.•29 views

Cross site scripting

IBM Jazz Reporting Service 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

3.5CVSS5.2AI score0.00557EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2021/02/18 3:10 p.m.•36 views

CVE-2020-4933

IBM Jazz Reporting Service 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

5.4CVSS5.2AI score0.00557EPSS
SaveExploits0References2
CVE
CVE
•added 2021/02/18 3:10 p.m.•71 views

CVE-2020-4933

IBM Jazz Reporting Service (JRS) is affected by CVE-2020-4933. Affected versions: JRS 6.0.6.1, 7.0, 7.0.1, and 7.0.2. The vulnerability is a cross-site scripting flaw that could allow an attacker to embed arbitrary JavaScript in the Web UI, potentially leading to credentials disclosure within a t...

5.4CVSS5.2AI score0.00557EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/02/18 12:00 a.m.•4 views

CVE-2020-4933: Improper Neutralization of Input During Web Page Generation

IBM Jazz Reporting Service 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

5.4CVSS5.7AI score0.00557EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/02/18 12:00 a.m.•0 views

PT-2021-12240

Name of the Vulnerable Software and Affected Versions IBM Jazz Reporting Service versions 6.0.6.1, 7.0, 7.0.1, and 7.0.2 Description This issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure with...

5.4CVSS5.8AI score0.00557EPSS
SaveExploits0References6
IBM Security Bulletins
IBM Security Bulletins
•added 2021/02/17 7:30 p.m.•29 views

Security Bulletin: Security vulnerability affects the Report Builder that is shipped with Jazz Reporting Service (CVE-2020-4933)

Summary There is a security vulnerability in the Report Builder shipped with Jazz Reporting Service. Vulnerability Details CVEID: CVE-2020-4933 DESCRIPTION: IBM Jazz Reporting Service is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the...

5.4CVSS0.7AI score0.00557EPSS
SaveExploits0Affected Software1
attackerkb
attackerkb
•added 2021/02/17 12:00 a.m.•16 views

CVE-2020-4933

IBM Jazz Reporting Service 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

5.4CVSS5AI score0.00557EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
•added 2021/02/17 12:00 a.m.•15 views

IBM Jazz Reporting Service 跨站脚本漏洞

IBM Jazz Reporting Service helps you quickly and easily integrate data from a variety of data sources across your tools and projects, and provides a set of ready-to-use reports for sharing information about your lifecycle management projects. A cross-site scripting vulnerability exists in IBM Jaz...

5.4CVSS6.1AI score0.00557EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2020/12/22 12:00 a.m.•12 views

The vulnerability of the apport operating system’s error registration service allows a hacker to escalate their privileges.

The vulnerability of the apport operating system’s error registration service is related to an incorrect definition of the link before accessing the file. Exploiting this vulnerability can allow attackers to increase their privileges...

6.5CVSS5.9AI score0.00651EPSS
SaveExploits1References3Affected Software1
CNVD
CNVD
•added 2020/11/24 12:00 a.m.•20 views

IBM Jazz Reporting Service Cross-Site Scripting Vulnerability (CNVD-2020-68256)

IBM Jazz Reporting Service JRS is a suite of ready-to-use reporting components from IBM in the United States. The product includes features such as report generation, data collection and lifecycle queries. IBM Jazz Reporting Service has a security vulnerability that makes it susceptible to stored...

6.4CVSS6.6AI score0.00561EPSS
SaveExploits0References1
OSV
OSV
•added 2020/11/19 4:15 p.m.•14 views

CVE-2020-4718

IBM Jazz Reporting Service 6.0.6, 6.0.6.1, 7.0, and 7.0.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

5.4CVSS6.1AI score0.00561EPSS
SaveExploits0References2
NVD
NVD
•added 2020/11/19 4:15 p.m.•30 views

CVE-2020-4718

IBM Jazz Reporting Service 6.0.6, 6.0.6.1, 7.0, and 7.0.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

6.4CVSS5.4AI score0.00561EPSS
SaveExploits0References2
Prion
Prion
•added 2020/11/19 4:15 p.m.•31 views

Cross site scripting

IBM Jazz Reporting Service 6.0.6, 6.0.6.1, 7.0, and 7.0.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

3.5CVSS5.2AI score0.00561EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2020/11/19 3:15 p.m.•34 views

CVE-2020-4718

IBM Jazz Reporting Service 6.0.6, 6.0.6.1, 7.0, and 7.0.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

6.4CVSS5.2AI score0.00561EPSS
SaveExploits0References2
CVE
CVE
•added 2020/11/19 3:15 p.m.•66 views

CVE-2020-4718

IBM Jazz Reporting Service (JRS) versions 6.0.6, 6.0.6.1, 7.0, and 7.0.1 are affected by CVE-2020-4718: a stored cross-site scripting vulnerability in the Web UI that could lead to credentials disclosure within a trusted session. The root cause is a vulnerability in the Report Builder shipped wit...

6.4CVSS5.2AI score0.00561EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/11/19 12:00 a.m.•3 views

CVE-2020-4718: Improper Neutralization of Input During Web Page Generation

IBM Jazz Reporting Service 6.0.6, 6.0.6.1, 7.0, and 7.0.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

6.4CVSS5.7AI score0.00561EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/11/19 12:00 a.m.•3 views

PT-2020-18217

Name of the Vulnerable Software and Affected Versions IBM Jazz Reporting Service versions 6.0.6 through 7.0.1 Description This issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a truste...

6.4CVSS0.00561EPSS
SaveExploits0References8
Rows per page
Query Builder