Design/Logic Flaw

IBM Jazz Reporting Service JRS is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site...

CVE-2016-5898

IBM Jazz Reporting Service JRS could allow a remote attacker to obtain sensitive information, caused by not restricting JSON serialization. By sending a direct request, an attacker could exploit this vulnerability to obtain sensitive information...

CVE-2016-6047

The CVE-2016-6047 entry concerns IBM Jazz Reporting Service (JRS). The connected IBM bulletins confirm this vulnerability is a cross-site scripting flaw in JRS (UI), capable of embedded arbitrary JavaScript and potentially leading to credential disclosure within a trusted session. Affected produc...

CVE-2016-6047

IBM Jazz Reporting Service JRS is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2016-6039

CVE-2016-6039 affects IBM Jazz Reporting Service (JRS) via cross-site scripting in the Web UI. According to IBM’s Security Bulletin for the Lifecycle Query Engine shipped with JRS, the vulnerability enables an attacker to embed arbitrary JavaScript in the UI, potentially leading to credential dis...

CVE-2016-5899

CVE-2016-5899: IBM Jazz Reporting Service (JRS) is vulnerable to cross-site scripting in the Web UI. Affected Jazz Reporting Service versions: 5.0, 5.0.1, 5.0.2, 6.0, 6.0.1, and 6.0.2. The issue stems from JRS allowing arbitrary JavaScript execution via user input in the UI, potentially leading t...

CVE-2016-6039

IBM Jazz Reporting Service JRS is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2016-5899

IBM Jazz Reporting Service JRS is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2016-5898

CVE-2016-5898 affects IBM Jazz Reporting Service (JRS) shipped with Rational Insight/RRDI. The vulnerability arises from not restricting JSON serialization, enabling a remote attacker to obtain sensitive information via a direct request. Affects JRS versions 5.0, 5.0.1, 5.0.2 and 6.0 (RRDI/Ration...

CVE-2016-6039: Improper Neutralization of Input During Web Page Generation

IBM Jazz Reporting Service JRS is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2016-5899: Improper Neutralization of Input During Web Page Generation

IBM Jazz Reporting Service JRS is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2016-6047: Improper Neutralization of Input During Web Page Generation

IBM Jazz Reporting Service JRS is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2016-5898: Undefined Security Weakness

IBM Jazz Reporting Service JRS could allow a remote attacker to obtain sensitive information, caused by not restricting JSON serialization. By sending a direct request, an attacker could exploit this vulnerability to obtain sensitive information...

CVE-2016-5897: Improper Neutralization of Input During Web Page Generation

IBM Jazz Reporting Service JRS is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site...

IBM Jazz Reporting Service Code Injection Vulnerability

IBM Jazz Reporting Service JRS is a suite of IBM USA applications for discovering cross-project reports that can be used in integration with IBM Rational CLM's Rational solution for managing all lifecycles of a development project. CLM users can access reports provided by JRS in dashboards,...

IBM Jazz Reporting Service Cross-Site Scripting Vulnerability (CNVD-2016-12645)

IBM Jazz Reporting Service JRS is a suite of IBM USA applications for discovering cross-project reports that can be used in integration with IBM Rational CLM's Rational solution for managing all lifecycles of a development project. CLM users can access reports provided by JRS in dashboards,...

IBM Jazz Reporting Service Cross-Site Scripting Vulnerability (CNVD-2016-12640)

IBM Jazz Reporting Service is a solution for integrating data. An unspecified cross-site scripting security vulnerability exists in IBM Jazz Reporting Service that originates from a failure to properly validate user input. An attacker could use this vulnerability to execute arbitrary script on a...

IBM Jazz Reporting Service Information Disclosure Vulnerability (CNVD-2016-12642)

IBM Jazz Reporting Service JRS is a suite of IBM USA applications for discovering cross-project reports that can be used in integration with IBM Rational CLM's Rational solution for managing all lifecycles of a development project. CLM users can access reports provided by JRS in dashboards,...

IBM Jazz Reporting Service Cross-Site Scripting Vulnerability (CNVD-2016-12641)

IBM Jazz Reporting Service is a solution for integrating data. An unspecified cross-site scripting attack vulnerability exists in IBM Jazz Reporting Service that stems from a failure to properly validate user input. An attacker could use this vulnerability to execute arbitrary scripts in an...

IBM Jazz Reporting Service Cross-Site Scripting Vulnerability (CNVD-2016-12643)

IBM Jazz Reporting Service JRS is a suite of IBM USA applications for discovering cross-project reports that can be used in integration with IBM Rational CLM's Rational solution for managing all lifecycles of a development project. CLM users can access reports provided by JRS in dashboards,...