Security Bulletin: Multiple security vulnerabilities have been identified in Jazz Reporting Service shipped with Rational Reporting for Development Intelligence (CVE-2017-1750, CVE-2018-1363)

Summary Jazz Reporting Service is shipped as a component of Rational Reporting for Development Intelligence RRDI. Information about multiple security vulnerabilities affecting Jazz Reporting Service has been published in a security bulletin. Vulnerability Details CVEID: CVE-2017-1750 DESCRIPTION:...

CVE-2018-1363

CVE-2018-1363 affects IBM Jazz Reporting Service (JRS) in Rational Insight RRDI and related bundles. The vulnerability is a cross-site scripting flaw in JRS Web UI that can allow an attacker to embed arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. Aff...