CVE-2015-7466: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Lifecycle Query Engine LQE in IBM Jazz Reporting Service JRS 6.0 before 6.0.0-Rational-CLM-ifix005 allows remote authenticated users to conduct LDAP injection attacks, and consequently bypass intended query restrictions or modify the LDAP directory, via unspecified vectors...

PT-2016-3788

Name of the Vulnerable Software and Affected Versions IBM Jazz Reporting Service JRS version 6.0 before 6.0.0-Rational-CLM-ifix005 Description A cross-site request forgery CSRF issue in the Lifecycle Query Engine LQE of IBM Jazz Reporting Service JRS allows remote authenticated users to hijack th...