Priority LOW 16
IBM Jazz Reporting Service could allow an authenticated user on the network to affect the system's performance using complicated queries due to insufficient resource pooling.
CVSS 3.1LOW 3.5· Adjacent network · Low privileges · No interaction · EPSS 0.00226 · Published 2026-02-04 · No fix listed CWE-410
Priority LOW 16
IBM Jazz Reporting Service could allow an authenticated user on the host network to obtain sensitive information about other projects that reside on the server.
CVSS 3.1LOW 3.5· Adjacent network · Low privileges · No interaction · EPSS 0.0022 · Published 2026-02-04 · No fix listed CWE-497
Priority LOW 16
IBM Jazz Reporting Service could allow an authenticated user on the host network to cause a denial of service using specially crafted SQL query that consumes excess memory resources.
CVSS 3.1LOW 3.5· Adjacent network · Low privileges · No interaction · EPSS 0.00226 · Published 2026-02-04 · No fix listed CWE-770
Priority LOW 34
IBM Jazz Reporting Service 7.0.2 and 7.0.3 does not invalidate session after logout which could allow an authenticated privileged user to impersonate another user on the system.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00384 · Published 2025-04-02 · No fix listed CWE-613
Priority LOW 20
IBM Jazz Reporting Service 7.0.3 stores user credentials in plain clear text which can be read by an admin user.
CVSS 3.1MEDIUM 4.4· Local · High privileges · No interaction · EPSS 0.00164 · Published 2024-06-13 · No fix listed CWE-256
Priority LOW 25
IBM Jazz Reporting Service 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to server-side request forgery (SSRF).
CVSS 3.1MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.00523 · Published 2021-05-13 · No fix listed CWE-918
Priority LOW 25
IBM Jazz Reporting Service 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00557 · Published 2021-02-18 · No fix listed CWE-79
Priority LOW 25
IBM Jazz Reporting Service 6.0.6, 6.0.6.1, 7.0, and 7.0.1 is vulnerable to stored cross-site scripting.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00561 · Published 2020-11-19 · No fix listed CWE-79
Priority LOW 29
IBM Jazz Reporting Service 7.0 and 7.0.1 is vulnerable to cross-site scripting.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0073 · Published 2020-08-10 · No fix listed CWE-79
Priority LOW 29
IBM Jazz Reporting Service 6.0.2, 6.0.6, 6.0.6.1, 7.0, and 7.0.1 is vulnerable to cross-site scripting.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0073 · Published 2020-08-10 · No fix listed CWE-79
Priority LOW 29
IBM Jazz Reporting Service 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0073 · Published 2020-08-10 · No fix listed CWE-79
Priority LOW 25
IBM Jazz Reporting Service 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00561 · Published 2020-05-28 · No fix listed CWE-79
Priority MEDIUM 45
IBM Jazz Reporting Service (JRS) 6.0.6.1 is vulnerable to SQL injection.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01367 · Published 2020-01-09 · No fix listed CWE-89
Priority LOW 26
IBM Jazz Reporting Service (JRS) 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 is vulnerable to cross-site scripting.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00679 · Published 2019-10-01 · No fix listed CWE-79
Priority LOW 26
IBM Jazz Reporting Service (JRS) 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 is vulnerable to cross-site scripting.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00679 · Published 2019-10-01 · No fix listed CWE-79
Priority LOW 26
IBM Jazz Reporting Service (JRS) 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 is vulnerable to cross-site scripting.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00679 · Published 2019-10-01 · No fix listed CWE-79
Priority LOW 26
IBM Jazz Reporting Service 6.0 through 6.0.6.1 is vulnerable to cross-site scripting.
CVSS 3.0MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00938 · Published 2019-05-29 · No fix listed CWE-79
Priority LOW 23
IBM Jazz Reporting Service (JRS) 6.0.6 could allow an authenticated user to access the execution log files as a guest user, and obtain the information of the server execution.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.01469 · Published 2019-04-29 · No fix listed CWE-269
Priority LOW 26
IBM Jazz Reporting Service (JRS) 6.0 through 6.0.6 is vulnerable to cross-site scripting.
CVSS 3.0MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00938 · Published 2019-04-29 · No fix listed CWE-79
Priority LOW 26
IBM Jazz Reporting Service (JRS) 6.0.3, 6.0.4, 6.0.5, and 6.0.6 is vulnerable to cross-site scripting.
CVSS 3.0MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00968 · Published 2019-01-08 · No fix listed CWE-79
Priority LOW 31
The Report Builder of Jazz Reporting Service 5.0 through 5.0.2 and 6.0 through 6.0.6 could allow an authenticated user to obtain sensitive information beyond its assigned privileges.
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01075 · Published 2018-11-16 · No fix listed CWE-200
Priority LOW 26
IBM Jazz Reporting Service (JRS) 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to cross-site scripting.
CVSS 3.0MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00931 · Published 2018-04-25 · No fix listed CWE-79
Priority LOW 26
IBM Jazz Reporting Service (JRS) 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to cross-site scripting.
CVSS 3.0MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00931 · Published 2018-04-25 · No fix listed CWE-79
Priority LOW 25
IBM Jazz Reporting Service (JRS) 6.0.4 could allow an authenticated user to obtain information on another server that the current report builder interacts with.
CVSS 3.0MEDIUM 5.0· Network · Low privileges · No interaction · EPSS 0.00951 · Published 2017-11-01 · No fix listed CWE-200
Priority LOW 26
An unspecified vulnerability in the Lifecycle Query Engine of Jazz Reporting Service 6.0 through 6.0.4 could disclose highly sensitive information.
CVSS 3.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00952 · Published 2017-09-14 · No fix listed CWE-200
Load more
THREATIST.IORead the docs