651 matches found
CVE-2017-1340: Exposure of Sensitive Information to an Unauthorized Actor
IBM Jazz Reporting Service JRS 6.0.4 could allow an authenticated user to obtain information on another server that the current report builder interacts with. IBM X-Force ID: 126455...
PT-2017-12977
Name of the Vulnerable Software and Affected Versions IBM Jazz Reporting Service JRS version 6.0.4 Description The issue allows an authenticated user to obtain information on another server that the current report builder interacts with. Recommendations For IBM Jazz Reporting Service JRS version...
Equifax Website Hacked To Deliver Malware-bearing Flash Update
By Waqas In May 2017, the website of renowned credit reporting service This is a post from HackRead.com Read the original post: Equifax Website Hacked To Deliver Malware-bearing Flash Update...
IBM Lifecycle Query Engine of Jazz Reporting Service Information Disclosure Vulnerability
IBM Lifecycle Query Engine of Jazz Reporting Service is a lifecycle query engine for Jazz Reporting Service from IBM, USA. A security vulnerability exists in IBM Lifecycle Query Engine of Jazz Reporting Service versions 6.0 through 6.0.4. An attacker could exploit the vulnerability to obtain...
CVE-2017-1490
An unspecified vulnerability in the Lifecycle Query Engine of Jazz Reporting Service 6.0 through 6.0.4 could disclose highly sensitive information...
CVE-2017-1490
An unspecified vulnerability in the Lifecycle Query Engine of Jazz Reporting Service 6.0 through 6.0.4 could disclose highly sensitive information...
CVE-2017-1490
An unspecified vulnerability in the Lifecycle Query Engine of Jazz Reporting Service 6.0 through 6.0.4 could disclose highly sensitive information...
CVE-2017-1490
The IBM Security Bulletin documents CVE-2017-1490 as a vulnerability in the Lifecycle Query Engine (LQE) shipped with Jazz Reporting Service, affecting Jazz Reporting Service versions 6.0–6.0.4 and capable of disclosing highly sensitive information. Remediation is patch-based: apply 6.0.2-Rationa...
CVE-2017-1490: Exposure of Sensitive Information to an Unauthorized Actor
An unspecified vulnerability in the Lifecycle Query Engine of Jazz Reporting Service 6.0 through 6.0.4 could disclose highly sensitive information...
PT-2017-13744
Name of the Vulnerable Software and Affected Versions Jazz Reporting Service versions 6.0 through 6.0.4 Description The issue is related to an unspecified vulnerability in the Lifecycle Query Engine, which could potentially disclose highly sensitive information. Recommendations For Jazz Reporting...
IBM Jazz Reporting Service Information Disclosure Vulnerability (CNVD-2017-21248)
IBM Jazz Reporting Service JRS is a suite of IBM USA applications for discovering cross-project reports that can be used in integration with IBM Rational CLM's Rational solution for managing all lifecycles of a development project. CLM users can access reports provided by JRS in dashboards,...
CVE-2017-1370
IBM Jazz Reporting Service JRS 5.0 and 6.0 could disclose sensitive information, including user credentials, through an error message from the Report Builder administrator configuration page. IBM X-Force ID: 126863...
CVE-2017-1370
CVE-2017-1370 affects IBM Jazz Reporting Service (JRS) versions 5.0–6.0 (as shipped with RRDI/Rational Insight). The vulnerability allows disclosure of sensitive information, including user credentials, via an error message on the Report Builder administrator configuration page. IBM security bull...
CVE-2017-1370: Generation of Error Message Containing Sensitive Information
IBM Jazz Reporting Service JRS 5.0 and 6.0 could disclose sensitive information, including user credentials, through an error message from the Report Builder administrator configuration page. IBM X-Force ID: 126863...
PT-2017-13028
Name of the Vulnerable Software and Affected Versions IBM Jazz Reporting Service JRS versions 5.0 through 6.0 Description The issue could disclose sensitive information, including user credentials, through an error message from the Report Builder administrator configuration page. Recommendations...
CVE-2016-9986
IBM Jazz Foundation Reporting Service JRS 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Forc...
CVE-2016-9989
IBM Jazz Foundation Reporting Service JRS 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Forc...
CVE-2016-9987
IBM Jazz Foundation Reporting Service JRS 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Forc...
CVE-2017-1096
IBM Jazz Reporting Service JRS 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 12065...