Read the docs

IBM

Records9712All Threatist records
Exploited (KEV)11In CISA KEV
CVSS critical986CVSS 9.0–10.0
CVSS high2776CVSS 7.0–8.9

Exploited now

IBM records in CISA KEV
TI-2026-08085 IBM Langflow Code Injection Vulnerability Priority CRITICAL 100KEV 2026-08-04TI-2022-23774 IBM Aspera Faspex Code Execution Vulnerability Priority CRITICAL 100KEV 2023-02-21TI-2013-03488 IBM InfoSphere BigInsights Invalid Input Vulnerability Priority CRITICAL 88KEV 2022-05-25TI-2014-05157 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Priority CRITICAL 100KEV 2022-01-28TI-2014-05975 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Priority CRITICAL 100KEV 2022-01-28TI-2015-06198 IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. Priority CRITICAL 100KEV 2022-01-10

Components

Products in the NVD configurations · select one to filter the records
Aix 545 records CRITICAL Websphere Application Server 503 records CRITICAL Db2 351 records HIGH Vios 237 records HIGH I 208 records HIGH Sterling B2b Integrator 204 records CRITICAL Rational Quality Manager 202 records MEDIUM Qradar Security Information And Event Manager 192 records CRITICAL

Records

55 records in Jazz Reporting Service · all components

TI-2019-03399 CVE-2019-4651 · GHSA-xwp7-f37m-h8r3

SQL injection in IBM Jazz Reporting Service

Priority MEDIUM 45

IBM Jazz Reporting Service (JRS) 6.0.6.1 is vulnerable to SQL injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01367 Published 2020-01-09 No fix listed CWE-89
TI-2016-00279 CVE-2016-0315 · GHSA-hxq4-c433-55vx

The Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service…

Priority MEDIUM 40

The Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 maintain session ID validity after a logout action, which allows remote aut…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01028 Published 2016-07-08 No fix listed CWE-284
TI-2016-02426 CVE-2016-2889 · GHSA-qcf6-5w34-wr94

Cross-site request forgery (CSRF) vulnerability in the Report Builder and Data Collection…

Priority LOW 39

Cross-site request forgery (CSRF) vulnerability in the Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016, 6.0 and 6.0.1 before 6.0.1 ifix005, and 6.0.2 before…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00541 Published 2016-07-08 No fix listed CWE-352
TI-2024-16524 CVE-2024-25051 · GHSA-83mw-hrr9-5qq8

IBM Jazz Reporting Service insufficient session expiration

Priority LOW 34

IBM Jazz Reporting Service 7.0.2 and 7.0.3 does not invalidate session after logout which could allow an authenticated privileged user to impersonate another user on the system.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00384 Published 2025-04-02 No fix listed CWE-613
TI-2018-01458 CVE-2018-1639 · GHSA-68pg-xqhr-rqwp

Information disclosure in IBM Jazz Reporting Service

Priority LOW 31

The Report Builder of Jazz Reporting Service 5.0 through 5.0.2 and 6.0 through 6.0.6 could allow an authenticated user to obtain sensitive information beyond its assigned privileges.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01075 Published 2018-11-16 No fix listed CWE-200
TI-2020-03867 CVE-2020-4541 · GHSA-mjfv-7ccm-vjfr

Cross-site scripting in IBM Jazz Reporting Service

Priority LOW 29

IBM Jazz Reporting Service 7.0 and 7.0.1 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0073 Published 2020-08-10 No fix listed CWE-79
TI-2020-03866 CVE-2020-4539 · GHSA-7vxf-797g-778q

Cross-site scripting in IBM Jazz Reporting Service

Priority LOW 29

IBM Jazz Reporting Service 6.0.2, 6.0.6, 6.0.6.1, 7.0, and 7.0.1 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0073 Published 2020-08-10 No fix listed CWE-79
TI-2020-03862 CVE-2020-4533 · GHSA-h2q5-5r2x-c27g

Cross-site scripting in IBM Jazz Reporting Service

Priority LOW 29

IBM Jazz Reporting Service 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0073 Published 2020-08-10 No fix listed CWE-79
TI-2019-03308 CVE-2019-4497 · GHSA-hh4f-4ggq-823f

Cross-site scripting in IBM Jazz Reporting Service

Priority LOW 26

IBM Jazz Reporting Service (JRS) 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00679 Published 2019-10-01 No fix listed CWE-79
TI-2019-03307 CVE-2019-4495 · GHSA-5f8c-rwx5-5wp9

Cross-site scripting in IBM Jazz Reporting Service

Priority LOW 26

IBM Jazz Reporting Service (JRS) 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00679 Published 2019-10-01 No fix listed CWE-79
TI-2019-03306 CVE-2019-4494 · GHSA-mx95-jg4h-5gxv

Cross-site scripting in IBM Jazz Reporting Service

Priority LOW 26

IBM Jazz Reporting Service (JRS) 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00679 Published 2019-10-01 No fix listed CWE-79
TI-2019-03126 CVE-2019-4184 · GHSA-m6wc-4572-7jp5

Cross-site scripting in IBM Jazz Reporting Service

Priority LOW 26

IBM Jazz Reporting Service 6.0 through 6.0.6.1 is vulnerable to cross-site scripting.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00938 Published 2019-05-29 No fix listed CWE-79
TI-2018-01732 CVE-2018-2004 · GHSA-48g3-7p82-p57x

Cross-site scripting in IBM Jazz Reporting Service

Priority LOW 26

IBM Jazz Reporting Service (JRS) 6.0 through 6.0.6 is vulnerable to cross-site scripting.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00938 Published 2019-04-29 No fix listed CWE-79
TI-2018-01671 CVE-2018-1918 · GHSA-58vx-vm86-mh3f

Cross-site scripting in IBM Jazz Reporting Service

Priority LOW 26

IBM Jazz Reporting Service (JRS) 6.0.3, 6.0.4, 6.0.5, and 6.0.6 is vulnerable to cross-site scripting.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00968 Published 2019-01-08 No fix listed CWE-79
TI-2018-01260 CVE-2018-1363 · GHSA-24ff-5f5g-gx6c

Cross-site scripting in IBM Jazz Reporting Service

Priority LOW 26

IBM Jazz Reporting Service (JRS) 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to cross-site scripting.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00931 Published 2018-04-25 No fix listed CWE-79
TI-2017-01361 CVE-2017-1750 · GHSA-w2v4-rr8v-qr5r

Cross-site scripting in IBM Jazz Reporting Service

Priority LOW 26

IBM Jazz Reporting Service (JRS) 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to cross-site scripting.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00931 Published 2018-04-25 No fix listed CWE-79
TI-2017-01200 CVE-2017-1490 · GHSA-3wx4-x6c7-9xm5

Information disclosure in IBM Jazz Reporting Service

Priority LOW 26

An unspecified vulnerability in the Lifecycle Query Engine of Jazz Reporting Service 6.0 through 6.0.4 could disclose highly sensitive information.

CVSS 3.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00952 Published 2017-09-14 No fix listed CWE-200
TI-2017-00895 CVE-2017-1096 · GHSA-vq5x-6pfm-wg56

Cross-site scripting in IBM Jazz Reporting Service

Priority LOW 26

IBM Jazz Reporting Service (JRS) 5.0 and 6.0 is vulnerable to cross-site scripting.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00717 Published 2017-07-05 No fix listed CWE-79
TI-2016-08091 CVE-2016-9989 · GHSA-jx2r-53rr-fqhg

Cross-site scripting in IBM Jazz Reporting Service

Priority LOW 26

IBM Jazz Foundation Reporting Service (JRS) 5.0 and 6.0 is vulnerable to cross-site scripting.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00717 Published 2017-07-05 No fix listed CWE-79
Load more
Open these records in search →