JR
Product
Jazz Reporting Service
55
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 7Medium 43Low 4
Watch
Add Jazz Reporting Service to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-2889 | 8.8 | Jul 8 | Cross-site request forgery (CSRF) vulnerability in the Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016, 6.0 and… Affected: 5.0; 5.0.1; 5.0.2; 6.0; 6.0.1; 6.0.2 |
| CVE-2016-0315 | 8.8 | Jul 8 | The Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 maintain session ID validity after… Affected: 5.0; 5.0.1; 5.0.2; 6.0; 6.0.1 |
| CVE-2015-7465 | 8.8 | Jan 10 | Cross-site request forgery (CSRF) vulnerability in Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service (JRS) 6.0 before 6.0.0-Rational-CLM-ifix005 allows remote… Affected: 6.0 |
| CVE-2016-0319 | 7.5 | Nov 25 | The XML parser in Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service 6.0 and 6.0.1 before 6.0.1 iFix006 allows remote authenticated administrators to read arbitrary files… Affected: 6.0; 6.0.1 |
| CVE-2015-7464 | 7.5 | Jan 29 | Report Builder in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2-Rational-CLM-ifix011 and 6.0 before 6.0.0-Rational-CLM-ifix005 allows remote attackers to cause a denial of… Affected: 5.0; 5.0.1; 5.0.2; 6.0 |
| CVE-2015-7470 | 7.5 | Jan 17 | Report Builder in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2-Rational-CLM-ifix011 and 6.0 before 6.0.0-Rational-CLM-ifix005 allows man-in-the-middle attackers to obtain… Affected: 5.0; 5.0.1; 5.0.2; 6.0 |
| CVE-2024-25051 | 7.2 | Apr 2 | IBM Jazz Reporting Service 7.0.2 and 7.0.3 does not invalidate session after logout which could allow an authenticated privileged user to impersonate another user on the system Affected: 7.0.2; 7.0.3 |
Showing 7