Jazz Reporting Service

17 results · Clear filters · Feed

• Medium 6.6
  CVE-2024-25051

  IBM Jazz Reporting Service insufficient session expiration

  IBM Jazz Reporting Service 7.0.2 and 7.0.3 does not invalidate session after logout which could allow an authenticated privileged user to impersonate another user on the system.

  IBM Jazz Reporting Service
  Apr 2, 2025
• Medium 4.4
  CVE-2024-25052

  IBM Jazz Reporting Service information disclosure

  IBM Jazz Reporting Service 7.0.3 stores user credentials in plain clear text which can be read by an admin user. IBM X-Force ID: 283363.

  IBM Jazz Reporting Service
  Jun 13, 2024
• Medium 6.5
  CVE-2021-20535

  IBM Jazz Reporting Service 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to server-side request forgery (SSRF). This may…

  IBM Jazz Reporting Service
  May 13, 2021
• Medium 5.4
  CVE-2020-4933

  IBM Jazz Reporting Service 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vulnerability all…

  IBM Jazz Reporting Service
  Feb 18, 2021
• Medium 6.4
  CVE-2020-4718

  IBM Jazz Reporting Service 6.0.6, 6.0.6.1, 7.0, and 7.0.1 is vulnerable to stored cross-site scripting. This vulnerabil…

  IBM Jazz Reporting Service
  Nov 19, 2020
• Medium 6.1
  CVE-2020-4541

  IBM Jazz Reporting Service 7.0 and 7.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embe…

  IBM Jazz Reporting Service
  Aug 10, 2020
• Medium 6.1
  CVE-2020-4539

  IBM Jazz Reporting Service 6.0.2, 6.0.6, 6.0.6.1, 7.0, and 7.0.1 is vulnerable to cross-site scripting. This vulnerabil…

  IBM Jazz Reporting Service
  Aug 10, 2020
• Medium 6.1
  CVE-2020-4533

  IBM Jazz Reporting Service 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows use…

  IBM Jazz Reporting Service
  Aug 10, 2020
• Medium 5.4
  CVE-2020-4419

  IBM Jazz Reporting Service 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows use…

  IBM Jazz Reporting Service
  May 28, 2020
• Medium 5.4
  CVE-2019-4497

  IBM Jazz Reporting Service (JRS) 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 is vulnerable to cross-site…

  IBM Jazz Reporting Service
  Oct 1, 2019
• Medium 5.4
  CVE-2019-4495

  IBM Jazz Reporting Service (JRS) 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 is vulnerable to cross-site…

  IBM Jazz Reporting Service
  Oct 1, 2019
• Medium 5.4
  CVE-2019-4494

  IBM Jazz Reporting Service (JRS) 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 is vulnerable to cross-site…

  IBM Jazz Reporting Service
  Oct 1, 2019
• Medium 5.4
  CVE-2019-4184

  IBM Jazz Reporting Service 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users t…

  IBM Jazz Reporting Service
  May 29, 2019
• Medium 5.4
  CVE-2018-2004

  IBM Jazz Reporting Service (JRS) 6.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows use…

  IBM Jazz Reporting Service
  Apr 29, 2019
• Medium 4.3
  CVE-2019-4047

  IBM Jazz Reporting Service (JRS) 6.0.6 could allow an authenticated user to access the execution log files as a guest u…

  IBM Jazz Reporting Service
  Apr 29, 2019
• Medium 5.4
  CVE-2018-1918

  IBM Jazz Reporting Service (JRS) 6.0.3, 6.0.4, 6.0.5, and 6.0.6 is vulnerable to cross-site scripting. This vulnerabili…

  IBM Jazz Reporting Service
  Jan 8, 2019
• Medium 4.3
  CVE-2018-1639

  The Report Builder of Jazz Reporting Service 5.0 through 5.0.2 and 6.0 through 6.0.6 could allow an authenticated user …

  IBM Jazz Reporting Service
  Nov 16, 2018