Jazz Reporting Service@6.0.6 Security Vulnerabilities and Issues — Jazz Reporting Service@6.0.6 CVE List

Lucene search

IbmJazz Reporting Service6.0.6

12 matches found

CVE•added 2020/05/28 3:15 p.m.•93 views

CVE-2020-4419

IBM Jazz Reporting Service 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...

5.4CVSS5.2AI score0.00179EPSS

CVE•added 2019/05/29 3:29 p.m.•62 views

CVE-2019-4184

IBM Jazz Reporting Service 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 158...

5.4CVSS5.2AI score0.00229EPSS

CVE•added 2019/10/01 3:15 p.m.•58 views

CVE-2019-4495

IBM Jazz Reporting Service (JRS) 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure ...

5.4CVSS5.2AI score0.00277EPSS

CVE•added 2019/10/01 3:15 p.m.•54 views

CVE-2019-4497

5.4CVSS5.2AI score0.00277EPSS

CVE•added 2019/10/01 3:15 p.m.•45 views

CVE-2019-4494

5.4CVSS5.2AI score0.00277EPSS

CVE•added 2019/04/29 5:29 p.m.•43 views

CVE-2019-4047

IBM Jazz Reporting Service (JRS) 6.0.6 could allow an authenticated user to access the execution log files as a guest user, and obtain the information of the server execution. IBM X-Force ID: 156243.

4.3CVSS4.5AI score0.00467EPSS

CVE•added 2019/04/29 5:29 p.m.•41 views

CVE-2018-2004

IBM Jazz Reporting Service (JRS) 6.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...

5.4CVSS5.2AI score0.00229EPSS

CVE•added 2019/01/08 5:0 p.m.•39 views

CVE-2018-1918

IBM Jazz Reporting Service (JRS) 6.0.3, 6.0.4, 6.0.5, and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IB...

5.4CVSS5.2AI score0.00229EPSS

CVE•added 2018/11/16 4:0 p.m.•37 views

CVE-2018-1639

The Report Builder of Jazz Reporting Service 5.0 through 5.0.2 and 6.0 through 6.0.6 could allow an authenticated user to obtain sensitive information beyond its assigned privileges. IBM X-Force ID: 144579.

6.5CVSS6AI score0.00162EPSS

CVE•added 2020/11/19 4:15 p.m.•34 views

CVE-2020-4718

IBM Jazz Reporting Service 6.0.6, 6.0.6.1, 7.0, and 7.0.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. I...

6.4CVSS5.2AI score0.0017EPSS

CVE•added 2020/08/10 1:15 p.m.•32 views

CVE-2020-4533

6.1CVSS5.8AI score0.00188EPSS

CVE•added 2020/08/10 1:15 p.m.•30 views

CVE-2020-4539

IBM Jazz Reporting Service 6.0.2, 6.0.6, 6.0.6.1, 7.0, and 7.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

6.1CVSS5.9AI score0.00188EPSS