JR
Product
Jazz Reporting Service
55
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 7Medium 43Low 4
Watch
Add Jazz Reporting Service to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-4651 | 9.8 | Jan 9 | IBM Jazz Reporting Service (JRS) 6.0.6.1 is vulnerable to SQL injection Affected: 6.0.6.1 |
| CVE-2016-2889 | 8.8 | Jul 8 | Cross-site request forgery (CSRF) vulnerability in the Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016, 6.0 and… Affected: 5.0; 5.0.1; 5.0.2; 6.0; 6.0.1; 6.0.2 |
| CVE-2016-0315 | 8.8 | Jul 8 | The Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 maintain session ID validity after… Affected: 5.0; 5.0.1; 5.0.2; 6.0; 6.0.1 |
| CVE-2015-7465 | 8.8 | Jan 10 | Cross-site request forgery (CSRF) vulnerability in Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service (JRS) 6.0 before 6.0.0-Rational-CLM-ifix005 allows remote… Affected: 6.0 |
| CVE-2016-0319 | 7.5 | Nov 25 | The XML parser in Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service 6.0 and 6.0.1 before 6.0.1 iFix006 allows remote authenticated administrators to read arbitrary files… Affected: 6.0; 6.0.1 |
| CVE-2015-7464 | 7.5 | Jan 29 | Report Builder in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2-Rational-CLM-ifix011 and 6.0 before 6.0.0-Rational-CLM-ifix005 allows remote attackers to cause a denial of… Affected: 5.0; 5.0.1; 5.0.2; 6.0 |
| CVE-2015-7470 | 7.5 | Jan 17 | Report Builder in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2-Rational-CLM-ifix011 and 6.0 before 6.0.0-Rational-CLM-ifix005 allows man-in-the-middle attackers to obtain… Affected: 5.0; 5.0.1; 5.0.2; 6.0 |
| CVE-2024-25051 | 7.2 | Apr 2 | IBM Jazz Reporting Service 7.0.2 and 7.0.3 does not invalidate session after logout which could allow an authenticated privileged user to impersonate another user on the system Affected: 7.0.2; 7.0.3 |
| CVE-2018-1639 | 6.5 | Nov 16 | The Report Builder of Jazz Reporting Service 5.0 through 5.0.2 and 6.0 through 6.0.6 could allow an authenticated user to obtain sensitive information beyond its assigned… Affected: 5.0 through 5.0.2; 6.0 through 6.0.2; 6.0.3 through 6.0.6 |
| CVE-2016-0317 | 6.5 | Nov 25 | Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service 6.0 and 6.0.1 before 6.0.1 iFix006 allows remote attackers to conduct clickjacking attacks via unspecified vectors Affected: 6.0; 6.0.1 |
| CVE-2016-0314 | 6.5 | Jul 8 | The Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 allow remote authenticated users… Affected: 5.0; 5.0.1; 5.0.2; 6.0; 6.0.1 |
| CVE-2020-4541 | 6.1 | Aug 10 | IBM Jazz Reporting Service 7.0 and 7.0.1 is vulnerable to cross-site scripting Affected: 7.0; 7.0.1 |
| CVE-2020-4539 | 6.1 | Aug 10 | IBM Jazz Reporting Service 6.0.2, 6.0.6, 6.0.6.1, 7.0, and 7.0.1 is vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1; 7.0; 7.0.1 |
| CVE-2020-4533 | 6.1 | Aug 10 | IBM Jazz Reporting Service 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting Affected: 6.0.6; 6.0.6.1; 7.0 |
| CVE-2021-20535 | 5.4 | May 13 | IBM Jazz Reporting Service 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to server-side request forgery (SSRF) Affected: 6.0.6.1; 7.0; 7.0.1; 7.0.2 |
| CVE-2020-4933 | 5.4 | Feb 18 | IBM Jazz Reporting Service 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting Affected: 6.0.6.1; 7.0; 7.0.1; 7.0.2 |
| CVE-2020-4718 | 5.4 | Nov 19 | IBM Jazz Reporting Service 6.0.6, 6.0.6.1, 7.0, and 7.0.1 is vulnerable to stored cross-site scripting Affected: 6.0.6; 6.0.6.1; 7.0; 7.0.1 |
| CVE-2020-4419 | 5.4 | May 28 | IBM Jazz Reporting Service 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting Affected: 6.0.6; 6.0.6.1; 7.0 |
| CVE-2019-4497 | 5.4 | Oct 1 | IBM Jazz Reporting Service (JRS) 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 is vulnerable to cross-site scripting Affected: 6.0; 6.0.1; 6.0.2; 6.0.3; 6.0.4; 6.0.5; +2 more |
| CVE-2019-4495 | 5.4 | Oct 1 | IBM Jazz Reporting Service (JRS) 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 is vulnerable to cross-site scripting Affected: 6.0; 6.0.1; 6.0.2; 6.0.3; 6.0.4; 6.0.5; +2 more |
| CVE-2019-4494 | 5.4 | Oct 1 | IBM Jazz Reporting Service (JRS) 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 is vulnerable to cross-site scripting Affected: 6.0; 6.0.1; 6.0.2; 6.0.3; 6.0.4; 6.0.5; +2 more |
| CVE-2019-4184 | 5.4 | May 29 | IBM Jazz Reporting Service 6.0 through 6.0.6.1 is vulnerable to cross-site scripting Affected: 6.0 through 6.0.6.1 |
| CVE-2018-2004 | 5.4 | Apr 29 | IBM Jazz Reporting Service (JRS) 6.0 through 6.0.6 is vulnerable to cross-site scripting Affected: 6.0 through 6.0.6 |
| CVE-2018-1918 | 5.4 | Jan 8 | IBM Jazz Reporting Service (JRS) 6.0.3, 6.0.4, 6.0.5, and 6.0.6 is vulnerable to cross-site scripting Affected: 6.0.3 through 6.0.6 |
| CVE-2018-1363 | 5.4 | Apr 25 | IBM Jazz Reporting Service (JRS) 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to cross-site scripting Affected: 5.0; 5.0.1; 5.0.2; 6.0; 6.0.1; 6.0.2; +3 more |
| CVE-2017-1750 | 5.4 | Apr 25 | IBM Jazz Reporting Service (JRS) 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to cross-site scripting Affected: 5.0; 5.0.1; 5.0.2; 6.0; 6.0.1; 6.0.2; +3 more |
| CVE-2017-1096 | 5.4 | Jul 5 | IBM Jazz Reporting Service (JRS) 5.0 and 6.0 is vulnerable to cross-site scripting Affected: 5.0; 5.0.1; 5.0.2; 6.0; 6.0.1; 6.0.2; +1 more |
| CVE-2016-9989 | 5.4 | Jul 5 | IBM Jazz Foundation Reporting Service (JRS) 5.0 and 6.0 is vulnerable to cross-site scripting Affected: 5.0; 5.0.1; 5.0.2; 6.0; 6.0.1; 6.0.2; +1 more |
| CVE-2016-9988 | 5.4 | Jul 5 | IBM Jazz Foundation Reporting Service (JRS) 5.0 and 6.0 is vulnerable to cross-site scripting Affected: 5.0; 5.0.1; 5.0.2; 6.0; 6.0.1; 6.0.2; +1 more |
| CVE-2016-9987 | 5.4 | Jul 5 | IBM Jazz Foundation Reporting Service (JRS) 5.0 and 6.0 is vulnerable to cross-site scripting Affected: 5.0; 5.0.1; 5.0.2; 6.0; 6.0.1; 6.0.2; +1 more |
| CVE-2016-9986 | 5.4 | Jul 5 | IBM Jazz Foundation Reporting Service (JRS) 5.0 and 6.0 is vulnerable to cross-site scripting Affected: 5.0; 5.0.1; 5.0.2; 6.0; 6.0.1; 6.0.2; +1 more |
| CVE-2016-6054 | 5.4 | Feb 1 | IBM Jazz Foundation is vulnerable to cross-site scripting Affected: 5.0; 5.0.1; 5.0.2; 6.0; 6.0.1; 6.0.2 |
| CVE-2016-6047 | 5.4 | Feb 1 | IBM Jazz Reporting Service (JRS) is vulnerable to cross-site scripting Affected: 6.0.2 |
| CVE-2016-6039 | 5.4 | Feb 1 | IBM Jazz Reporting Service (JRS) is vulnerable to cross-site scripting Affected: 6.0; 6.0.1; 6.0.2 |
| CVE-2016-5899 | 5.4 | Feb 1 | IBM Jazz Reporting Service (JRS) is vulnerable to cross-site scripting Affected: 5.0; 5.0.1; 5.0.2; 6.0; 6.0.1; 6.0.2 |
| CVE-2016-5897 | 5.4 | Feb 1 | IBM Jazz Reporting Service (JRS) is vulnerable to HTML injection Affected: 6.0; 6.0.1; 6.0.2 |
| CVE-2016-0316 | 5.4 | Nov 25 | Cross-site scripting (XSS) vulnerability in Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service 6.0 and 6.0.1 before 6.0.1 iFix006 and 6.0.2 before iFix003 allows remote… Affected: 6.0; 6.0.1; 6.0.2 |
| CVE-2016-2888 | 5.4 | Jul 8 | Cross-site scripting (XSS) vulnerability in the Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and 6.x before… Affected: 5.0; 5.0.1; 5.0.2; 6.0; 6.0.1 |
| CVE-2016-0350 | 5.4 | Jul 8 | Cross-site scripting (XSS) vulnerability in the Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and 6.x before… Affected: 5.0; 5.0.1; 5.0.2; 6.0; 6.0.1 |
| CVE-2016-0313 | 5.4 | Jul 8 | Cross-site scripting (XSS) vulnerability in the Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and 6.x before… Affected: 5.0; 5.0.1; 5.0.2; 6.0; 6.0.1 |
| CVE-2015-7467 | 5.4 | Jan 17 | Cross-site scripting (XSS) vulnerability in Report Builder in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2-Rational-CLM-ifix011 and 6.0 before 6.0.0-Rational-CLM-ifix005… Affected: 5.0; 5.0.1; 5.0.2; 6.0 |
| CVE-2017-1490 | 5.3 | Sep 14 | An unspecified vulnerability in the Lifecycle Query Engine of Jazz Reporting Service 6.0 through 6.0.4 could disclose highly sensitive information Affected: 6.0; 6.0.1; 6.0.2; 6.0.3; 6.0.4 |
| CVE-2017-1340 | 5.0 | Nov 1 | IBM Jazz Reporting Service (JRS) 6.0.4 could allow an authenticated user to obtain information on another server that the current report builder interacts with Affected: 6.0.4 |
| CVE-2016-0318 | 5.0 | Nov 25 | Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service 6.0 and 6.0.1 before 6.0.1 iFix006 does not destroy a Session ID upon a logout action, which allows remote attackers to… Affected: 6.0; 6.0.1 |
| CVE-2017-1370 | 4.9 | Jul 31 | IBM Jazz Reporting Service (JRS) 5.0 and 6.0 could disclose sensitive information, including user credentials, through an error message from the Report Builder administrator… Affected: 5.0; 5.0.1; 5.0.2; 6.0; 6.0.1; 6.0.2; +2 more |
| CVE-2024-25052 | 4.4 | Jun 13 | IBM Jazz Reporting Service 7.0.3 stores user credentials in plain clear text which can be read by an admin user Affected: 7.0.3 |
| CVE-2019-4047 | 4.3 | Apr 29 | IBM Jazz Reporting Service (JRS) 6.0.6 could allow an authenticated user to access the execution log files as a guest user, and obtain the information of the server execution Affected: 6.0.6 |
| CVE-2017-1157 | 4.3 | Jul 5 | IBM Jazz Reporting Service (JRS) 5.0 and 6.0 could allow an authenticated attacker to access report data that should be restricted to authorized users Affected: 5.0; 6.0 |
| CVE-2016-5898 | 4.3 | Feb 1 | IBM Jazz Reporting Service (JRS) could allow a remote attacker to obtain sensitive information, caused by not restricting JSON serialization Affected: 5.0; 5.0.1; 5.0.2; 6.0; 6.0.1; 6.0.2 |
| CVE-2015-7469 | 4.3 | Jan 17 | Report Builder in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2-Rational-CLM-ifix011 and 6.0 before 6.0.0-Rational-CLM-ifix005 allows remote authenticated users to bypass… Affected: 5.0; 5.0.1; 5.0.2; 6.0 |