CVE-2016-0315: Improper Access Control

The Report Builder and Data Collection Component DCC in IBM Jazz Reporting Service JRS 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 maintain session ID validity after a logout action, which allows remote authenticated users to hijack sessions by leveraging an unattended workstation...

CVE-2016-2888: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Report Builder and Data Collection Component DCC in IBM Jazz Reporting Service JRS 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different...

IBM Jazz Reporting Service (JRS) Cross-Site Scripting Vulnerability (CNVD-2016-04650)

IBM Jazz Reporting Service is an optional component of IBM Rational Reporting for Development Intelligence. IBM Jazz Reporting Service JRS has a cross-site scripting vulnerability in the Report Builder and Data Collection Component DCC implementations. A remote attacker could exploit this...

CVE-2016-0314: Undefined Security Weakness

The Report Builder and Data Collection Component DCC in IBM Jazz Reporting Service JRS 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 allow remote authenticated users to conduct clickjacking attacks via unspecified vectors...

PT-2016-5271

Name of the Vulnerable Software and Affected Versions IBM Jazz Reporting Service versions 5.x before 5.0.2 ifix016 IBM Jazz Reporting Service versions 6.0 and 6.0.1 before 6.0.1 ifix005 IBM Jazz Reporting Service version 6.0.2 before ifix002 Description A cross-site request forgery CSRF issue...

PT-2016-4140

Name of the Vulnerable Software and Affected Versions IBM Jazz Reporting Service versions 5.x before 5.0.2 ifix016 IBM Jazz Reporting Service versions 6.x before 6.0.1 ifix005 Description The issue allows remote authenticated users to hijack sessions by leveraging an unattended workstation, due t...

CVE-2016-0350: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Report Builder and Data Collection Component DCC in IBM Jazz Reporting Service JRS 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different...

CVE-2016-2889: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Report Builder and Data Collection Component DCC in IBM Jazz Reporting Service JRS 5.x before 5.0.2 ifix016, 6.0 and 6.0.1 before 6.0.1 ifix005, and 6.0.2 before ifix002 allows remote authenticated users to hijack the authentication of arbitrar...

PT-2016-4158

Cross-site scripting XSS vulnerability in the Report Builder and Data Collection Component DCC in IBM Jazz Reporting Service JRS 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different...

PT-2016-4138

Cross-site scripting XSS vulnerability in the Report Builder and Data Collection Component DCC in IBM Jazz Reporting Service JRS 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different...

PT-2016-4139

Name of the Vulnerable Software and Affected Versions IBM Jazz Reporting Service versions 5.x before 5.0.2 ifix016 IBM Jazz Reporting Service versions 6.x before 6.0.1 ifix005 Description The issue allows remote authenticated users to conduct clickjacking attacks. Recommendations For versions 5.x...

PT-2016-5270

Cross-site scripting XSS vulnerability in the Report Builder and Data Collection Component DCC in IBM Jazz Reporting Service JRS 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different...

CVE-2016-0313: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Report Builder and Data Collection Component DCC in IBM Jazz Reporting Service JRS 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different...

IBM Jazz Foundation Information Disclosure Vulnerability

IBM Rational Collaborative Lifecycle Management CLM, etc. are products of IBM Corporation in the U.S. IBM Rational CLM, Rational Team Concert RTC and Rational Engineering Lifecycle Manager RELM are collaborative lifecycle management solutions; Rational Requirements Composer RRC and Rational DOORS...

Real Drum Jazz - Suspicious files, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Real Drum Jazz published at the 'play' market has multiple vulnerabilities...

IBM Jazz Reporting Service (JRS) Denial of Service Vulnerability

IBM Jazz Reporting Service JRS is a suite of applications for discovering cross-project reports from IBM in the U.S. Report Builder is one of the tools used to quickly create reports. A security vulnerability exists in Report Builder in IBM JRS 5.0.2-Rational-CLM-ifix011 prior to version 5.x and...

Design/Logic Flaw

Report Builder in IBM Jazz Reporting Service JRS 5.x before 5.0.2-Rational-CLM-ifix011 and 6.0 before 6.0.0-Rational-CLM-ifix005 allows remote attackers to cause a denial of service Report Builder server outage via a crafted request to a Report Builder instance URL...

CVE-2015-7464

Report Builder in IBM Jazz Reporting Service JRS 5.x before 5.0.2-Rational-CLM-ifix011 and 6.0 before 6.0.0-Rational-CLM-ifix005 allows remote attackers to cause a denial of service Report Builder server outage via a crafted request to a Report Builder instance URL...

CVE-2015-7464

The CVE-2015-7464 issue affects IBM Jazz Reporting Service (JRS) Report Builder, shipped with Rational Insight. A crafted request to a Report Builder URL can cause the Report Builder server to become unusable, enabling a remote attacker to trigger a denial of service. Affected versions include Ja...

CVE-2015-7464

Report Builder in IBM Jazz Reporting Service JRS 5.x before 5.0.2-Rational-CLM-ifix011 and 6.0 before 6.0.0-Rational-CLM-ifix005 allows remote attackers to cause a denial of service Report Builder server outage via a crafted request to a Report Builder instance URL...