Ibm

Jazz Reporting Service

55 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2016-0317

  • EPSS 0.21%
  • Veröffentlicht 25.11.2016 20:59:02
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service 6.0 and 6.0.1 before 6.0.1 iFix006 allows remote attackers to conduct clickjacking attacks via unspecified vectors.

5.4

CVE-2016-0316

  • EPSS 0.17%
  • Veröffentlicht 25.11.2016 20:59:00
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service 6.0 and 6.0.1 before 6.0.1 iFix006 and 6.0.2 before iFix003 allows remote authenticated users to inject arbitrary web script or HTML via a crafted ...

8.8

CVE-2016-2889

  • EPSS 0.11%
  • Veröffentlicht 08.07.2016 01:59:10
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Cross-site request forgery (CSRF) vulnerability in the Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016, 6.0 and 6.0.1 before 6.0.1 ifix005, and 6.0.2 before ifix002 allows remote authent...

5.4

CVE-2016-2888

  • EPSS 0.21%
  • Veröffentlicht 08.07.2016 01:59:09
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in the Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 allows remote authenticated users to inject arbitrary web scr...

5.4

CVE-2016-0350

  • EPSS 0.17%
  • Veröffentlicht 08.07.2016 01:59:08
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in the Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 allows remote authenticated users to inject arbitrary web scr...

8.8

CVE-2016-0315

  • EPSS 0.47%
  • Veröffentlicht 08.07.2016 01:59:07
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 maintain session ID validity after a logout action, which allows remote authenticated users to hijack ses...

6.5

CVE-2016-0314

  • EPSS 0.15%
  • Veröffentlicht 08.07.2016 01:59:06
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 allow remote authenticated users to conduct clickjacking attacks via unspecified vectors.

5.4

CVE-2016-0313

  • EPSS 0.17%
  • Veröffentlicht 08.07.2016 01:59:05
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in the Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 allows remote authenticated users to inject arbitrary web scr...

7.5

CVE-2015-7464

  • EPSS 0.87%
  • Veröffentlicht 29.01.2016 11:59:00
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Report Builder in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2-Rational-CLM-ifix011 and 6.0 before 6.0.0-Rational-CLM-ifix005 allows remote attackers to cause a denial of service (Report Builder server outage) via a crafted request to a Report B...

7.5

CVE-2015-7470

  • EPSS 0.23%
  • Veröffentlicht 17.01.2016 05:59:06
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Report Builder in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2-Rational-CLM-ifix011 and 6.0 before 6.0.0-Rational-CLM-ifix005 allows man-in-the-middle attackers to obtain sensitive information via unspecified vectors, as demonstrated by login in...