Read the docs
TI-2025-20370 Aliases CVE-2025-27550GHSA-5m99-jm9q-cfc4

IBM Jazz Reporting Service Information Disclosure

Priority LOW 16CWE-497Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
Low · None · None
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-497.

Summary

IBM Jazz Reporting Service could allow an authenticated user on the host network to obtain sensitive information about other projects that reside on the server.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0022 12th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
IBMJazz Reporting Service7.1 – 7.1iFix006; 7.0.3 – 7.0.3iFix020—No fix listedCNA
  • Jazz Reporting Service VendorIBM Affected 7.1 – 7.1iFix006; 7.0.3 – 7.0.3iFix020 Fixed in — No fix listed CNA

CPE configurations NVD · 28

CPEVersionsRoleVendor
cpe:2.3:a:ibm:jazz_reporting_service:7.0.3:-:*:*:*:*:*:*7.0.3VulnerableIBM
cpe:2.3:a:ibm:jazz_reporting_service:7.0.3:ifix001:*:*:*:*:*:*7.0.3 ifix001VulnerableIBM
cpe:2.3:a:ibm:jazz_reporting_service:7.0.3:ifix002:*:*:*:*:*:*7.0.3 ifix002VulnerableIBM
cpe:2.3:a:ibm:jazz_reporting_service:7.0.3:ifix003:*:*:*:*:*:*7.0.3 ifix003VulnerableIBM
cpe:2.3:a:ibm:jazz_reporting_service:7.0.3:ifix004:*:*:*:*:*:*7.0.3 ifix004VulnerableIBM
cpe:2.3:a:ibm:jazz_reporting_service:7.0.3:ifix005:*:*:*:*:*:*7.0.3 ifix005VulnerableIBM
cpe:2.3:a:ibm:jazz_reporting_service:7.0.3:ifix006:*:*:*:*:*:*7.0.3 ifix006VulnerableIBM
cpe:2.3:a:ibm:jazz_reporting_service:7.0.3:ifix007:*:*:*:*:*:*7.0.3 ifix007VulnerableIBM
cpe:2.3:a:ibm:jazz_reporting_service:7.0.3:ifix008:*:*:*:*:*:*7.0.3 ifix008VulnerableIBM
cpe:2.3:a:ibm:jazz_reporting_service:7.0.3:ifix009:*:*:*:*:*:*7.0.3 ifix009VulnerableIBM
  • cpe:2.3:a:ibm:jazz_reporting_service:7.0.3:-:*:*:*:*:*:* Versions 7.0.3 Vulnerable ·IBM
  • cpe:2.3:a:ibm:jazz_reporting_service:7.0.3:ifix001:*:*:*:*:*:* Versions 7.0.3 ifix001 Vulnerable ·IBM
  • cpe:2.3:a:ibm:jazz_reporting_service:7.0.3:ifix002:*:*:*:*:*:* Versions 7.0.3 ifix002 Vulnerable ·IBM
  • cpe:2.3:a:ibm:jazz_reporting_service:7.0.3:ifix003:*:*:*:*:*:* Versions 7.0.3 ifix003 Vulnerable ·IBM
  • cpe:2.3:a:ibm:jazz_reporting_service:7.0.3:ifix004:*:*:*:*:*:* Versions 7.0.3 ifix004 Vulnerable ·IBM
  • cpe:2.3:a:ibm:jazz_reporting_service:7.0.3:ifix005:*:*:*:*:*:* Versions 7.0.3 ifix005 Vulnerable ·IBM
  • cpe:2.3:a:ibm:jazz_reporting_service:7.0.3:ifix006:*:*:*:*:*:* Versions 7.0.3 ifix006 Vulnerable ·IBM
  • cpe:2.3:a:ibm:jazz_reporting_service:7.0.3:ifix007:*:*:*:*:*:* Versions 7.0.3 ifix007 Vulnerable ·IBM
  • cpe:2.3:a:ibm:jazz_reporting_service:7.0.3:ifix008:*:*:*:*:*:* Versions 7.0.3 ifix008 Vulnerable ·IBM
  • cpe:2.3:a:ibm:jazz_reporting_service:7.0.3:ifix009:*:*:*:*:*:* Versions 7.0.3 ifix009 Vulnerable ·IBM
Show 18 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:ibm:jazz_reporting_service:7.0.3:ifix010:*:*:*:*:*:*7.0.3 ifix010VulnerableIBM
cpe:2.3:a:ibm:jazz_reporting_service:7.0.3:ifix011:*:*:*:*:*:*7.0.3 ifix011VulnerableIBM
cpe:2.3:a:ibm:jazz_reporting_service:7.0.3:ifix012:*:*:*:*:*:*7.0.3 ifix012VulnerableIBM
cpe:2.3:a:ibm:jazz_reporting_service:7.0.3:ifix013:*:*:*:*:*:*7.0.3 ifix013VulnerableIBM
cpe:2.3:a:ibm:jazz_reporting_service:7.0.3:ifix014:*:*:*:*:*:*7.0.3 ifix014VulnerableIBM
cpe:2.3:a:ibm:jazz_reporting_service:7.0.3:ifix015:*:*:*:*:*:*7.0.3 ifix015VulnerableIBM
cpe:2.3:a:ibm:jazz_reporting_service:7.0.3:ifix016:*:*:*:*:*:*7.0.3 ifix016VulnerableIBM
cpe:2.3:a:ibm:jazz_reporting_service:7.0.3:ifix017:*:*:*:*:*:*7.0.3 ifix017VulnerableIBM
cpe:2.3:a:ibm:jazz_reporting_service:7.0.3:ifix018:*:*:*:*:*:*7.0.3 ifix018VulnerableIBM
cpe:2.3:a:ibm:jazz_reporting_service:7.0.3:ifix019:*:*:*:*:*:*7.0.3 ifix019VulnerableIBM
cpe:2.3:a:ibm:jazz_reporting_service:7.0.3:ifix020:*:*:*:*:*:*7.0.3 ifix020VulnerableIBM
cpe:2.3:a:ibm:jazz_reporting_service:7.1:-:*:*:*:*:*:*7.1VulnerableIBM
cpe:2.3:a:ibm:jazz_reporting_service:7.1:ifix001:*:*:*:*:*:*7.1 ifix001VulnerableIBM
cpe:2.3:a:ibm:jazz_reporting_service:7.1:ifix002:*:*:*:*:*:*7.1 ifix002VulnerableIBM
cpe:2.3:a:ibm:jazz_reporting_service:7.1:ifix003:*:*:*:*:*:*7.1 ifix003VulnerableIBM
cpe:2.3:a:ibm:jazz_reporting_service:7.1:ifix004-sr1-base:*:*:*:*:*:*7.1 ifix004-sr1-baseVulnerableIBM
cpe:2.3:a:ibm:jazz_reporting_service:7.1:ifix005:*:*:*:*:*:*7.1 ifix005VulnerableIBM
cpe:2.3:a:ibm:jazz_reporting_service:7.1:ifix006:*:*:*:*:*:*7.1 ifix006VulnerableIBM
  • cpe:2.3:a:ibm:jazz_reporting_service:7.0.3:ifix010:*:*:*:*:*:* Versions 7.0.3 ifix010 Vulnerable ·IBM
  • cpe:2.3:a:ibm:jazz_reporting_service:7.0.3:ifix011:*:*:*:*:*:* Versions 7.0.3 ifix011 Vulnerable ·IBM
  • cpe:2.3:a:ibm:jazz_reporting_service:7.0.3:ifix012:*:*:*:*:*:* Versions 7.0.3 ifix012 Vulnerable ·IBM
  • cpe:2.3:a:ibm:jazz_reporting_service:7.0.3:ifix013:*:*:*:*:*:* Versions 7.0.3 ifix013 Vulnerable ·IBM
  • cpe:2.3:a:ibm:jazz_reporting_service:7.0.3:ifix014:*:*:*:*:*:* Versions 7.0.3 ifix014 Vulnerable ·IBM
  • cpe:2.3:a:ibm:jazz_reporting_service:7.0.3:ifix015:*:*:*:*:*:* Versions 7.0.3 ifix015 Vulnerable ·IBM
  • cpe:2.3:a:ibm:jazz_reporting_service:7.0.3:ifix016:*:*:*:*:*:* Versions 7.0.3 ifix016 Vulnerable ·IBM
  • cpe:2.3:a:ibm:jazz_reporting_service:7.0.3:ifix017:*:*:*:*:*:* Versions 7.0.3 ifix017 Vulnerable ·IBM
  • cpe:2.3:a:ibm:jazz_reporting_service:7.0.3:ifix018:*:*:*:*:*:* Versions 7.0.3 ifix018 Vulnerable ·IBM
  • cpe:2.3:a:ibm:jazz_reporting_service:7.0.3:ifix019:*:*:*:*:*:* Versions 7.0.3 ifix019 Vulnerable ·IBM
  • cpe:2.3:a:ibm:jazz_reporting_service:7.0.3:ifix020:*:*:*:*:*:* Versions 7.0.3 ifix020 Vulnerable ·IBM
  • cpe:2.3:a:ibm:jazz_reporting_service:7.1:-:*:*:*:*:*:* Versions 7.1 Vulnerable ·IBM
  • cpe:2.3:a:ibm:jazz_reporting_service:7.1:ifix001:*:*:*:*:*:* Versions 7.1 ifix001 Vulnerable ·IBM
  • cpe:2.3:a:ibm:jazz_reporting_service:7.1:ifix002:*:*:*:*:*:* Versions 7.1 ifix002 Vulnerable ·IBM
  • cpe:2.3:a:ibm:jazz_reporting_service:7.1:ifix003:*:*:*:*:*:* Versions 7.1 ifix003 Vulnerable ·IBM
  • cpe:2.3:a:ibm:jazz_reporting_service:7.1:ifix004-sr1-base:*:*:*:*:*:* Versions 7.1 ifix004-sr1-base Vulnerable ·IBM
  • cpe:2.3:a:ibm:jazz_reporting_service:7.1:ifix005:*:*:*:*:*:* Versions 7.1 ifix005 Vulnerable ·IBM
  • cpe:2.3:a:ibm:jazz_reporting_service:7.1:ifix006:*:*:*:*:*:* Versions 7.1 ifix006 Vulnerable ·IBM

Remediation

No fixed version listed by the sources yet.

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Advisory ·

    IBM Jazz Reporting Service — ibm.com/support/pages/node/7258083

    3 records Highest priority Priority LOW 3 LOW

    Other records, highest priority first

    • TI-2025-01871 IBM Jazz Reporting Service Denial of ServicePriority LOW 16
    • TI-2025-01573 IBM Jazz Reporting Service Denial of ServicePriority LOW 16
    Show all 3 records → Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-27550
  2. 2026-10-03 Alias added: GHSA-5m99-jm9q-cfc4

References

Patch 1

  • TI-2019-03399 SQL injection in IBM Jazz Reporting Service CVSS 3.1CRITICAL 9.8
  • TI-2016-00279 The Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service… CVSS 3.0HIGH 8.8
  • TI-2016-02426 Cross-site request forgery (CSRF) vulnerability in the Report Builder and Data Collection… CVSS 3.0HIGH 8.8
  • TI-2015-06213 Cross-site request forgery (CSRF) vulnerability in Lifecycle Query Engine (LQE) in IBM… CVSS 3.0HIGH 8.8
  • TI-2016-00283 The XML parser in Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service 6.0 and… CVSS 3.0HIGH 7.5
  • TI-2015-06218 Report Builder in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2-Rational-CLM-ifix011… CVSS 3.0HIGH 7.5
See all 54 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences