Login Request a demo
JR
Product
Jazz Reporting Service
by IBM · last CVE Feb 4, 2026
55
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities55In the news0Timeline
Severity mix
Critical 1High 7Medium 43Low 4
Severity
All severities55Critical1High7Medium43Low4
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Jazz Reporting Service to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-1639
6.5
1%
Nov 16
The Report Builder of Jazz Reporting Service 5.0 through 5.0.2 and 6.0 through 6.0.6 could allow an authenticated user to obtain sensitive information beyond its assigned…
Affected: 5.0 through 5.0.2; 6.0 through 6.0.2; 6.0.3 through 6.0.6
CVE-2016-0317
6.5
1%
Nov 25
Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service 6.0 and 6.0.1 before 6.0.1 iFix006 allows remote attackers to conduct clickjacking attacks via unspecified vectors
Affected: 6.0; 6.0.1
CVE-2016-0314
6.5
1%
Jul 8
The Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 allow remote authenticated users…
Affected: 5.0; 5.0.1; 5.0.2; 6.0; 6.0.1
CVE-2020-4541
6.1
1%
Aug 10
IBM Jazz Reporting Service 7.0 and 7.0.1 is vulnerable to cross-site scripting
Affected: 7.0; 7.0.1
CVE-2020-4539
6.1
1%
Aug 10
IBM Jazz Reporting Service 6.0.2, 6.0.6, 6.0.6.1, 7.0, and 7.0.1 is vulnerable to cross-site scripting
Affected: 6.0.2; 6.0.6; 6.0.6.1; 7.0; 7.0.1
CVE-2020-4533
6.1
1%
Aug 10
IBM Jazz Reporting Service 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting
Affected: 6.0.6; 6.0.6.1; 7.0
CVE-2021-20535
5.4
1%
May 13
IBM Jazz Reporting Service 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to server-side request forgery (SSRF)
Affected: 6.0.6.1; 7.0; 7.0.1; 7.0.2
CVE-2020-4933
5.4
1%
Feb 18
IBM Jazz Reporting Service 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting
Affected: 6.0.6.1; 7.0; 7.0.1; 7.0.2
CVE-2020-4718
5.4
1%
Nov 19
IBM Jazz Reporting Service 6.0.6, 6.0.6.1, 7.0, and 7.0.1 is vulnerable to stored cross-site scripting
Affected: 6.0.6; 6.0.6.1; 7.0; 7.0.1
CVE-2020-4419
5.4
1%
May 28
IBM Jazz Reporting Service 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting
Affected: 6.0.6; 6.0.6.1; 7.0
CVE-2019-4497
5.4
1%
Oct 1
IBM Jazz Reporting Service (JRS) 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 is vulnerable to cross-site scripting
Affected: 6.0; 6.0.1; 6.0.2; 6.0.3; 6.0.4; 6.0.5; +2 more
CVE-2019-4495
5.4
1%
Oct 1
IBM Jazz Reporting Service (JRS) 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 is vulnerable to cross-site scripting
Affected: 6.0; 6.0.1; 6.0.2; 6.0.3; 6.0.4; 6.0.5; +2 more
CVE-2019-4494
5.4
1%
Oct 1
IBM Jazz Reporting Service (JRS) 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 is vulnerable to cross-site scripting
Affected: 6.0; 6.0.1; 6.0.2; 6.0.3; 6.0.4; 6.0.5; +2 more
CVE-2019-4184
5.4
1%
May 29
IBM Jazz Reporting Service 6.0 through 6.0.6.1 is vulnerable to cross-site scripting
Affected: 6.0 through 6.0.6.1
CVE-2018-2004
5.4
1%
Apr 29
IBM Jazz Reporting Service (JRS) 6.0 through 6.0.6 is vulnerable to cross-site scripting
Affected: 6.0 through 6.0.6
CVE-2018-1918
5.4
1%
Jan 8
IBM Jazz Reporting Service (JRS) 6.0.3, 6.0.4, 6.0.5, and 6.0.6 is vulnerable to cross-site scripting
Affected: 6.0.3 through 6.0.6
CVE-2018-1363
5.4
1%
Apr 25
IBM Jazz Reporting Service (JRS) 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to cross-site scripting
Affected: 5.0; 5.0.1; 5.0.2; 6.0; 6.0.1; 6.0.2; +3 more
CVE-2017-1750
5.4
1%
Apr 25
IBM Jazz Reporting Service (JRS) 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to cross-site scripting
Affected: 5.0; 5.0.1; 5.0.2; 6.0; 6.0.1; 6.0.2; +3 more
CVE-2017-1096
5.4
1%
Jul 5
IBM Jazz Reporting Service (JRS) 5.0 and 6.0 is vulnerable to cross-site scripting
Affected: 5.0; 5.0.1; 5.0.2; 6.0; 6.0.1; 6.0.2; +1 more
CVE-2016-9989
5.4
1%
Jul 5
IBM Jazz Foundation Reporting Service (JRS) 5.0 and 6.0 is vulnerable to cross-site scripting
Affected: 5.0; 5.0.1; 5.0.2; 6.0; 6.0.1; 6.0.2; +1 more
CVE-2016-9988
5.4
1%
Jul 5
IBM Jazz Foundation Reporting Service (JRS) 5.0 and 6.0 is vulnerable to cross-site scripting
Affected: 5.0; 5.0.1; 5.0.2; 6.0; 6.0.1; 6.0.2; +1 more
CVE-2016-9987
5.4
1%
Jul 5
IBM Jazz Foundation Reporting Service (JRS) 5.0 and 6.0 is vulnerable to cross-site scripting
Affected: 5.0; 5.0.1; 5.0.2; 6.0; 6.0.1; 6.0.2; +1 more
CVE-2016-9986
5.4
1%
Jul 5
IBM Jazz Foundation Reporting Service (JRS) 5.0 and 6.0 is vulnerable to cross-site scripting
Affected: 5.0; 5.0.1; 5.0.2; 6.0; 6.0.1; 6.0.2; +1 more
CVE-2016-6054
5.4
1%
Feb 1
IBM Jazz Foundation is vulnerable to cross-site scripting
Affected: 5.0; 5.0.1; 5.0.2; 6.0; 6.0.1; 6.0.2
CVE-2016-6047
5.4
1%
Feb 1
IBM Jazz Reporting Service (JRS) is vulnerable to cross-site scripting
Affected: 6.0.2
CVE-2016-6039
5.4
1%
Feb 1
IBM Jazz Reporting Service (JRS) is vulnerable to cross-site scripting
Affected: 6.0; 6.0.1; 6.0.2
CVE-2016-5899
5.4
1%
Feb 1
IBM Jazz Reporting Service (JRS) is vulnerable to cross-site scripting
Affected: 5.0; 5.0.1; 5.0.2; 6.0; 6.0.1; 6.0.2
CVE-2016-5897
5.4
1%
Feb 1
IBM Jazz Reporting Service (JRS) is vulnerable to HTML injection
Affected: 6.0; 6.0.1; 6.0.2
CVE-2016-0316
5.4
1%
Nov 25
Cross-site scripting (XSS) vulnerability in Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service 6.0 and 6.0.1 before 6.0.1 iFix006 and 6.0.2 before iFix003 allows remote…
Affected: 6.0; 6.0.1; 6.0.2
CVE-2016-2888
5.4
1%
Jul 8
Cross-site scripting (XSS) vulnerability in the Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and 6.x before…
Affected: 5.0; 5.0.1; 5.0.2; 6.0; 6.0.1
CVE-2016-0350
5.4
1%
Jul 8
Cross-site scripting (XSS) vulnerability in the Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and 6.x before…
Affected: 5.0; 5.0.1; 5.0.2; 6.0; 6.0.1
CVE-2016-0313
5.4
1%
Jul 8
Cross-site scripting (XSS) vulnerability in the Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and 6.x before…
Affected: 5.0; 5.0.1; 5.0.2; 6.0; 6.0.1
CVE-2015-7467
5.4
1%
Jan 17
Cross-site scripting (XSS) vulnerability in Report Builder in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2-Rational-CLM-ifix011 and 6.0 before 6.0.0-Rational-CLM-ifix005…
Affected: 5.0; 5.0.1; 5.0.2; 6.0
CVE-2017-1490
5.3
1%
Sep 14
An unspecified vulnerability in the Lifecycle Query Engine of Jazz Reporting Service 6.0 through 6.0.4 could disclose highly sensitive information
Affected: 6.0; 6.0.1; 6.0.2; 6.0.3; 6.0.4
CVE-2017-1340
5.0
1%
Nov 1
IBM Jazz Reporting Service (JRS) 6.0.4 could allow an authenticated user to obtain information on another server that the current report builder interacts with
Affected: 6.0.4
CVE-2016-0318
5.0
1%
Nov 25
Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service 6.0 and 6.0.1 before 6.0.1 iFix006 does not destroy a Session ID upon a logout action, which allows remote attackers to…
Affected: 6.0; 6.0.1
CVE-2017-1370
4.9
1%
Jul 31
IBM Jazz Reporting Service (JRS) 5.0 and 6.0 could disclose sensitive information, including user credentials, through an error message from the Report Builder administrator…
Affected: 5.0; 5.0.1; 5.0.2; 6.0; 6.0.1; 6.0.2; +2 more
CVE-2024-25052
4.4
0%
Jun 13
IBM Jazz Reporting Service 7.0.3 stores user credentials in plain clear text which can be read by an admin user
Affected: 7.0.3
CVE-2019-4047
4.3
1%
Apr 29
IBM Jazz Reporting Service (JRS) 6.0.6 could allow an authenticated user to access the execution log files as a guest user, and obtain the information of the server execution
Affected: 6.0.6
CVE-2017-1157
4.3
1%
Jul 5
IBM Jazz Reporting Service (JRS) 5.0 and 6.0 could allow an authenticated attacker to access report data that should be restricted to authorized users
Affected: 5.0; 6.0
CVE-2016-5898
4.3
1%
Feb 1
IBM Jazz Reporting Service (JRS) could allow a remote attacker to obtain sensitive information, caused by not restricting JSON serialization
Affected: 5.0; 5.0.1; 5.0.2; 6.0; 6.0.1; 6.0.2
CVE-2015-7469
4.3
1%
Jan 17
Report Builder in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2-Rational-CLM-ifix011 and 6.0 before 6.0.0-Rational-CLM-ifix005 allows remote authenticated users to bypass…
Affected: 5.0; 5.0.1; 5.0.2; 6.0
CVE-2015-7468
4.3
1%
Jan 17
Report Builder in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2-Rational-CLM-ifix011 and 6.0 before 6.0.0-Rational-CLM-ifix005 allows remote authenticated users to bypass…
Affected: 5.0; 5.0.1; 5.0.2; 6.0
Showing 43