Jazz Reporting Service@6.0.6.1 Security Vulnerabilities and Issues — Jazz Reporting Service@6.0.6.1 CVE List

Lucene search

IbmJazz Reporting Service6.0.6.1

11 matches found

CVE•added 2020/05/28 3:15 p.m.•93 views

CVE-2020-4419

IBM Jazz Reporting Service 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...

5.4CVSS5.2AI score0.00179EPSS

CVE•added 2019/05/29 3:29 p.m.•62 views

CVE-2019-4184

IBM Jazz Reporting Service 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 158...

5.4CVSS5.2AI score0.00229EPSS

CVE•added 2019/10/01 3:15 p.m.•58 views

CVE-2019-4495

IBM Jazz Reporting Service (JRS) 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure ...

5.4CVSS5.2AI score0.00277EPSS

CVE•added 2019/10/01 3:15 p.m.•54 views

CVE-2019-4497

5.4CVSS5.2AI score0.00277EPSS

CVE•added 2019/10/01 3:15 p.m.•45 views

CVE-2019-4494

5.4CVSS5.2AI score0.00277EPSS

CVE•added 2021/02/18 3:15 p.m.•35 views

CVE-2020-4933

IBM Jazz Reporting Service 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Fo...

5.4CVSS5.2AI score0.00187EPSS

CVE•added 2020/11/19 4:15 p.m.•34 views

CVE-2020-4718

IBM Jazz Reporting Service 6.0.6, 6.0.6.1, 7.0, and 7.0.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. I...

6.4CVSS5.2AI score0.0017EPSS

CVE•added 2020/01/09 5:15 p.m.•33 views

CVE-2019-4651

IBM Jazz Reporting Service (JRS) 6.0.6.1 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 170962.

9.8CVSS9.2AI score0.00264EPSS

CVE•added 2020/08/10 1:15 p.m.•32 views

CVE-2020-4533

6.1CVSS5.8AI score0.00188EPSS

CVE•added 2020/08/10 1:15 p.m.•30 views

CVE-2020-4539

IBM Jazz Reporting Service 6.0.2, 6.0.6, 6.0.6.1, 7.0, and 7.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

6.1CVSS5.9AI score0.00188EPSS

CVE•added 2021/05/13 4:15 p.m.•30 views

CVE-2021-20535

IBM Jazz Reporting Service 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 198834.

6.5CVSS5.3AI score0.00094EPSS