Skip to content
OpenAdvisories
Medium · 6.1 CVE-2020-4541 EUVD-2020-25788GHSA-mjfv-7ccm-vjfr

IBM Jazz Reporting Service 7.0 and 7.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScri…

Published Aug 10, 2020 · Updated Sep 17, 2024 · Assigned by ibm

Description

IBM Jazz Reporting Service 7.0 and 7.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 183039.

Affected products

VendorProductAffectedFixed
IBM Jazz Reporting Service 7.0, 7.0.1 —

References