CVE-2016-6024: Exposure of Sensitive Information to an Unauthorized Actor

IBM Jazz technology based products might divulge information that might be useful in helping attackers through error messages. IBM X-Force ID: 116868...

PT-2017-14148

Name of the Vulnerable Software and Affected Versions IBM Jazz Foundation products affected versions not specified Description The issue allows an authenticated user to obtain sensitive information from stack traces. Recommendations At the moment, there is no information about a newer version tha...

PT-2017-8851

Name of the Vulnerable Software and Affected Versions IBM Jazz technology based products affected versions not specified Description The issue might allow attackers to gain useful information through error messages, potentially aiding in further attacks. Recommendations At the moment, there is no...

CVE-2017-1570: Exposure of Sensitive Information to an Unauthorized Actor

IBM Jazz Foundation products could allow an authenticated user to obtain sensitive information from stack traces. IBM X-Force ID: 131852...

IBM Jazz Reporting Service Information Disclosure Vulnerability (CNVD-2017-34406)

IBM Jazz Reporting Service JRS is a suite of IBM USA applications for discovering cross-project reports that can be used in integration with IBM Rational CLM's Rational solution for managing all lifecycles of a development project. CLM users can access reports provided by JRS in dashboards,...

Unspecified Information Disclosure Vulnerability in Multiple IBM Product Jazz Foundation based Applications

IBM Rational Collaborative Lifecycle Management is a set of collaborative lifecycle management solutions.Rational Quality Manager is a set of collaborative, Web-based quality management solutions. IBM Rational Collaborative Lifecycle Management is a collaborative lifecycle management solution,...

CVE-2017-1340

IBM Jazz Reporting Service JRS 6.0.4 could allow an authenticated user to obtain information on another server that the current report builder interacts with. IBM X-Force ID: 126455...

Information disclosure

IBM Jazz Reporting Service JRS 6.0.4 could allow an authenticated user to obtain information on another server that the current report builder interacts with. IBM X-Force ID: 126455...

CVE-2017-1340

IBM Jazz Reporting Service JRS 6.0.4 could allow an authenticated user to obtain information on another server that the current report builder interacts with. IBM X-Force ID: 126455...

CVE-2017-1340

IBM Jazz Reporting Service (JRS) 6.0.4 contains a vulnerability where an authenticated user could obtain information on another server that the report builder interacts with. The affected product is Jazz Reporting Service 6.0.4. Root cause details describe information disclosure via the Report Bu...

IBM Jazz Foundation Cross-Site Scripting Vulnerability (CNVD-2017-34461)

IBM Jazz Foundation is a software development collaboration platform. A cross-site scripting vulnerability exists in IBM Jazz Foundation. An attacker can exploit this vulnerability to embed arbitrary JavaScript code in the web UI, resulting in the disclosure of session information...

PT-2017-12977

Name of the Vulnerable Software and Affected Versions IBM Jazz Reporting Service JRS version 6.0.4 Description The issue allows an authenticated user to obtain information on another server that the current report builder interacts with. Recommendations For IBM Jazz Reporting Service JRS version...

CVE-2017-1340: Exposure of Sensitive Information to an Unauthorized Actor

IBM Jazz Reporting Service JRS 6.0.4 could allow an authenticated user to obtain information on another server that the current report builder interacts with. IBM X-Force ID: 126455...

CVE-2017-1241

An unspecified vulnerability in IBM Jazz Foundation based applications might allow the display of stack trace information to an attacker. IBM X-Force ID: 124523...

CVE-2017-1164

IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123036...

Cross site scripting

IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123036...

Design/Logic Flaw

An unspecified vulnerability in IBM Jazz Foundation based applications might allow the display of stack trace information to an attacker. IBM X-Force ID: 124523...

CVE-2017-1241

An unspecified vulnerability in IBM Jazz Foundation based applications might allow the display of stack trace information to an attacker. IBM X-Force ID: 124523...

CVE-2017-1164

IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123036...

CVE-2017-1164

IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123036...