Known vulnerabilities in Jazz Reporting Service

Software CPE: cpe:2.3:a:ibm_corporation:jazz_reporting_service:*:*:*:*:*:*:*:*
Total vulnerabilities: 100
Public exploits: 6
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Jazz Reporting Service Jazz Reporting Service is affected by 100 known vulnerabilities: 10 high, 45 medium, 45 low Critical High Medium Low

Vulnerabilities (100)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU126561 - Permissive List of Allowed Inputs
CVE-2026-41240
CWE-183 Low
No
No
7.0.3 iFix023, 7.1 iFix011, 7.2 iFix003 20.04.2026 SB2026041630
SB2026042938
SB2026060221
and 9 more
#VU126560 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-41239
CWE-79 Medium
No
No
7.0.3 iFix023, 7.1 iFix011, 7.2 iFix003 20.04.2026 SB2026041630
SB2026042938
SB2026060221
and 5 more
#VU113607 - Uncontrolled Recursion
CVE-2025-48924
CWE-674 Medium
No
No
7.0.2 iFix0036, 7.0.3 iFix022, 7.1 iFix009 04.08.2025 SB2025080422
SB2025080423
SB2025080427
and 180 more
#VU111165 - Improper Access Control
CVE-2025-48734
CWE-284 Medium
No
No
7.0.2 iFix0036, 7.0.3 iFix020, 7.1 iFix005 16.06.2025 SB2025061643
SB2025061644
SB2025061645
and 141 more
#VU111162 - Resource exhaustion
CVE-2025-48976
CWE-400 Medium
Available
No
7.0.2 iFix0036, 7.0.3 iFix022, 7.1 iFix009 16.06.2025 SB2025061634
SB2025061635
SB2025061927
and 156 more
#VU105783 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-26791
CWE-79 Low
No
No
7.0.3 iFix023, 7.1 iFix011, 7.2 iFix003 17.03.2025 SB2025031740
SB2025031741
SB2025031771
and 35 more
#VU102028 - Use of Web Link to Untrusted Target with window.opener Access
CVE-2024-39727
CWE-1022 Medium
No
No
7.0.2 iFix033, 7.0.3 iFix0012 30.12.2024 SB2024123053
SB2025010614
SB2025022616
and 1 more
#VU99556 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2024-48910
CWE-1321 Medium
No
No
7.0.3 iFix023, 7.1 iFix011, 7.2 iFix003 31.10.2024 SB2024103154
SB2024111356
SB2024112007
and 15 more
#VU99261 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-47875
CWE-79 Medium
No
No
7.0.3 iFix023, 7.1 iFix011, 7.2 iFix003 22.10.2024 SB20241022382
SB20241022383
SB20241022392
and 27 more
#VU98025 - Resource exhaustion
CVE-2024-47554
CWE-400 Medium
No
No
7.0.1 iFix005, 7.0.2 iFix0036, 7.0.3 iFix0018 03.10.2024 SB2024100352
SB2024100421
SB2024101007
and 132 more
#VU97758 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2024-45801
CWE-1321 Medium
No
No
7.0.3 iFix023, 7.1 iFix011, 7.2 iFix003 27.09.2024 SB2024092751
SB2024100823
SB2024100827
and 32 more
#VU94745 - Unprotected Storage of Credentials
CVE-2024-25052
CWE-256 Low
No
No
7.0.3 iFix02 26.07.2024 SB2024072604
#VU91984 - Permissions, Privileges, and Access Controls
CVE-2024-3933
CWE-264 Low
No
No
- 12.06.2024 SB2024061213
SB20240613101
SB20240613102
and 29 more
#VU87744 - Out-of-bounds write
CVE-2024-29133
CWE-787 High
No
No
7.0.3 iFix009, 7.02 iFix031 22.03.2024 SB2024032169
SB2024032283
SB20240417122
and 40 more
#VU87706 - Out-of-bounds write
CVE-2024-29131
CWE-787 High
No
No
7.0.3 iFix009, 7.02 iFix031 21.03.2024 SB2024032169
SB2024032283
SB20240417122
and 36 more
#VU86824 - Improper input validation
CVE-2020-14338
CWE-20 Medium
No
No
7.0.3 iFix009, 7.02 iFix031 27.02.2024 SB2024022724
SB2024030424
SB2024040928
and 9 more
#VU85468 - Improper input validation
CVE-2024-20918
CWE-20 Medium
No
No
- 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 192 more
#VU85471 - Improper input validation
CVE-2024-20921
CWE-20 Medium
No
No
- 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 185 more
#VU83545 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2022-46337
CWE-90 High
No
No
7.0.2 iFix033, 7.0.3 iFix0012 28.11.2023 SB2023112861
SB2024011806
SB2024020107
and 34 more
#VU29228 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-4051
CWE-79 Low
No
No
7.0.2 iFix030, 7.0.3 iFix07 24.06.2020 SB2020062408
SB2022082433
SB2022120724
and 7 more


Showing elements 1 - 20 out of 100