CVE-2015-7465

CVE-2015-7465 concerns the Lifecycle Query Engine (LQE) within IBM Jazz Reporting Service (JRS). A CSRF vulnerability affects JRS 6.0 prior to 6.0.0-Rational-CLM-ifix005, enabling remote authenticated users to hijack the authentication of arbitrary users via requests that insert XSS sequences. Th...

CVE-2015-7466

The CVE-2015-7466 issue affects IBM Jazz Reporting Service (JRS) Lifecycle Query Engine (LQE) in the JRS 6.0 line (before 6.0.0-Rational-CLM-ifix005). The vulnerability enables LDAP injection by remote authenticated users, allowing bypass of query restrictions or modification of the LDAP director...

CVE-2015-7465

Cross-site request forgery CSRF vulnerability in Lifecycle Query Engine LQE in IBM Jazz Reporting Service JRS 6.0 before 6.0.0-Rational-CLM-ifix005 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences...

CVE-2015-7465

Cross-site request forgery CSRF vulnerability in Lifecycle Query Engine LQE in IBM Jazz Reporting Service JRS 6.0 before 6.0.0-Rational-CLM-ifix005 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences. Recent assessments: Assesse...

IBM Rational Insight Information Disclosure Vulnerability

IBM Rational Insight is an enterprise-class reporting application product from IBM in the U.S. It can extract data from third-party products into a data warehouse, and present the reports graphically using CognosBI services running on WebSphere. A security vulnerability exists in IBM Rational...

CVE-2014-6115

IBM Rational Insight 1.1.1.5 allows remote attackers to bypass authentication and obtain sensitive information via a crafted request to a Jazz Reporting Service JRS report URL...

Authentication flaw

IBM Rational Insight 1.1.1.5 allows remote attackers to bypass authentication and obtain sensitive information via a crafted request to a Jazz Reporting Service JRS report URL...

CVE-2014-6115

IBM Rational Insight 1.1.1.5 allows remote attackers to bypass authentication and obtain sensitive information via a crafted request to a Jazz Reporting Service JRS report URL...

WebTrends Enterprise Reporting Server 3.1 c/3.5 Source Code Disclosure

No description provided by source. source: http://www.securityfocus.com/bid/2812/info WebTrends Live is a web-based reporting service which provides interactive tracking of usage statistics and E-commerce revenue. It is possible to view the source code of arbitrary scripts on the WebTrends Live...

WebTrends Enterprise Reporting Server 3.1 c3.5 - Source Code Disclosure

WebTrends Enterprise Reporting Server 3.1 c3.5 - Source Code Disclosure source: https://www.securityfocus.com/bid/2812/info WebTrends Live is a web-based reporting service which provides interactive tracking of usage statistics and E-commerce revenue. It is possible to view the source code of...