CVE-2016-5897

IBM Jazz Reporting Service JRS is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site...

CVE-2016-5897

IBM Jazz Reporting Service JRS is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site...

CVE-2016-5898

IBM Jazz Reporting Service JRS could allow a remote attacker to obtain sensitive information, caused by not restricting JSON serialization. By sending a direct request, an attacker could exploit this vulnerability to obtain sensitive information...

CVE-2016-5899

IBM Jazz Reporting Service JRS is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2016-6039

IBM Jazz Reporting Service JRS is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

Cross site scripting

IBM Jazz Reporting Service JRS is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

Design/Logic Flaw

IBM Jazz Reporting Service JRS is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site...

Cross site scripting

IBM Jazz Reporting Service JRS is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2016-5898

IBM Jazz Reporting Service JRS could allow a remote attacker to obtain sensitive information, caused by not restricting JSON serialization. By sending a direct request, an attacker could exploit this vulnerability to obtain sensitive information...

CVE-2016-5899

IBM Jazz Reporting Service JRS is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2016-6039

IBM Jazz Reporting Service JRS is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2016-6047

IBM Jazz Reporting Service JRS is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2016-5898

CVE-2016-5898 affects IBM Jazz Reporting Service (JRS) shipped with Rational Insight/RRDI. The vulnerability arises from not restricting JSON serialization, enabling a remote attacker to obtain sensitive information via a direct request. Affects JRS versions 5.0, 5.0.1, 5.0.2 and 6.0 (RRDI/Ration...

CVE-2016-5899

CVE-2016-5899: IBM Jazz Reporting Service (JRS) is vulnerable to cross-site scripting in the Web UI. Affected Jazz Reporting Service versions: 5.0, 5.0.1, 5.0.2, 6.0, 6.0.1, and 6.0.2. The issue stems from JRS allowing arbitrary JavaScript execution via user input in the UI, potentially leading t...

CVE-2016-6039

CVE-2016-6039 affects IBM Jazz Reporting Service (JRS) via cross-site scripting in the Web UI. According to IBM’s Security Bulletin for the Lifecycle Query Engine shipped with JRS, the vulnerability enables an attacker to embed arbitrary JavaScript in the UI, potentially leading to credential dis...

CVE-2016-6047

The CVE-2016-6047 entry concerns IBM Jazz Reporting Service (JRS). The connected IBM bulletins confirm this vulnerability is a cross-site scripting flaw in JRS (UI), capable of embedded arbitrary JavaScript and potentially leading to credential disclosure within a trusted session. Affected produc...

PT-2017-8809

Name of the Vulnerable Software and Affected Versions IBM Jazz Reporting Service JRS affected versions not specified Description The issue allows a remote attacker to inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the...

PT-2017-8810

Name of the Vulnerable Software and Affected Versions IBM Jazz Reporting Service JRS affected versions not specified Description The issue is caused by a lack of restriction on JSON serialization, allowing a remote attacker to obtain sensitive information by sending a direct request...

PT-2017-8811

Name of the Vulnerable Software and Affected Versions IBM Jazz Reporting Service JRS affected versions not specified Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a...

PT-2017-8862

Name of the Vulnerable Software and Affected Versions IBM Jazz Reporting Service JRS affected versions not specified Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a...