CVE-2016-9986

IBM Jazz Foundation Reporting Service JRS 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Forc...

CVE-2016-9987

IBM Jazz Foundation Reporting Service JRS 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Forc...

CVE-2016-9988

IBM Jazz Foundation Reporting Service JRS 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Forc...

CVE-2016-9989

IBM Jazz Foundation Reporting Service JRS 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Forc...

CVE-2017-1157

IBM Jazz Reporting Service (JRS) 5.0/6.0 is affected by CVE-2017-1157, allowing an authenticated attacker to access report data restricted to authorized users. Affected products include Jazz Reporting Service integrated with Rational Insight/RRDI (5.0.x and 6.0.x lines). Remediation is available ...

CVE-2017-1096

CVE-2017-1096 affects IBM Jazz Reporting Service (JRS) 5.0 and 6.0. It is a cross-site scripting vulnerability in the Web UI that could allow an authenticated user to embed arbitrary JavaScript, potentially leading to credential disclosure within a trusted session. Affected versions include JRS 5...

CVE-2016-9986

The CVE-2016-9986 entry affects IBM Jazz Foundation Reporting Service (JRS) 5.0 and 6.0. It is a cross-site scripting vulnerability in the Web UI that can lead to credentials disclosure within a trusted session. The vulnerability details and CVSS scores are documented in IBM/IBM X-Force reference...

CVE-2016-9987

The CVE-2016-9987 entry describes a Cross‑Site Scripting vulnerability in IBM Jazz Foundation Reporting Service (JRS) present in JRS 5.0 and 6.0 (component of Rational Insight/RRDI). The vulnerability allows embedding arbitrary JavaScript in the Web UI, potentially altering functionality and enab...

CVE-2016-9700

IBM Jazz Foundation could allow an authenticated attacker to obtain sensitive information from error message stack traces. IBM X-Force ID: 119528...

CVE-2016-9700

IBM CVE-2016-9700 (IBM Jazz Foundation) enables an authenticated attacker to obtain sensitive information from error message stack traces. Affected products include Rational CLM, RDNG, RELM, RTC, RQM, Rhapsody DM, RSA DM, and Rational software architecture components, with versions ranging in CLM...

IBM Jazz Reporting Service Information Disclosure Vulnerability (CNVD-2017-15929)

IBM Jazz Reporting Service JRS is a suite of IBM USA applications for discovering cross-project reports that can be used in integration with IBM Rational CLM's Rational solution for managing all lifecycles of a development project. CLM users can access reports provided by JRS in dashboards,...

IBM Jazz Reporting Service Cross-Site Scripting Vulnerability (CNVD-2017-15917)

IBM Jazz Reporting Service JRS is a suite of IBM USA applications for discovering cross-project reports that can be used in integration with IBM Rational CLM's Rational solution for managing all lifecycles of a development project. CLM users can access reports provided by JRS in dashboards,...

PT-2017-10413

Name of the Vulnerable Software and Affected Versions IBM Jazz Foundation Reporting Service JRS versions 5.0 through 6.0 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure withi...

PT-2017-10415

Name of the Vulnerable Software and Affected Versions IBM Jazz Foundation Reporting Service JRS versions 5.0 through 6.0 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure withi...

PT-2017-12107

Name of the Vulnerable Software and Affected Versions IBM Jazz Reporting Service JRS versions 5.0 through 6.0 Description The issue allows an authenticated attacker to access report data that should be restricted to authorized users. Recommendations For versions 5.0 through 6.0, update to a versi...

IBM Jazz Reporting Service Cross-Site Scripting Vulnerability (CNVD-2017-15918)

IBM Jazz Reporting Service JRS is a suite of IBM USA applications for discovering cross-project reports that can be used in integration with IBM Rational CLM's Rational solution for managing all lifecycles of a development project. CLM users can access reports provided by JRS in dashboards,...

PT-2017-10416

Name of the Vulnerable Software and Affected Versions IBM Jazz Foundation Reporting Service JRS versions 5.0 through 6.0 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure withi...

PT-2017-11639

Name of the Vulnerable Software and Affected Versions IBM Jazz Reporting Service JRS versions 5.0 through 6.0 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted...

PT-2017-10414

Name of the Vulnerable Software and Affected Versions IBM Jazz Foundation Reporting Service JRS versions 5.0 through 6.0 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure withi...

CVE-2016-9700: Exposure of Sensitive Information to an Unauthorized Actor

IBM Jazz Foundation could allow an authenticated attacker to obtain sensitive information from error message stack traces. IBM X-Force ID: 119528...