Known vulnerabilities in Jazz Reporting Service 7.2

Version: 7.2
Software CPE: cpe:2.3:a:ibm_corporation:jazz_reporting_service:*:*:*:*:*:*:*:*
Total vulnerabilities: 6
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 6.9

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Jazz Reporting Service version 7.2 Jazz Reporting Service 7.2 is affected by 6 vulnerabilities: 4 medium, 2 low Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU126561 - Permissive List of Allowed Inputs
CVE-2026-41240
CWE-183 Low
No
No
7.0.3 iFix023, 7.1 iFix011, 7.2 iFix003 20.04.2026 SB2026041630
SB2026042938
SB2026060221
and 9 more
#VU126560 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-41239
CWE-79 Medium
No
No
7.0.3 iFix023, 7.1 iFix011, 7.2 iFix003 20.04.2026 SB2026041630
SB2026042938
SB2026060221
and 5 more
#VU105783 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-26791
CWE-79 Low
No
No
7.0.3 iFix023, 7.1 iFix011, 7.2 iFix003 17.03.2025 SB2025031740
SB2025031741
SB2025031771
and 35 more
#VU99556 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2024-48910
CWE-1321 Medium
No
No
7.0.3 iFix023, 7.1 iFix011, 7.2 iFix003 31.10.2024 SB2024103154
SB2024111356
SB2024112007
and 15 more
#VU99261 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-47875
CWE-79 Medium
No
No
7.0.3 iFix023, 7.1 iFix011, 7.2 iFix003 22.10.2024 SB20241022382
SB20241022383
SB20241022392
and 27 more
#VU97758 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2024-45801
CWE-1321 Medium
No
No
7.0.3 iFix023, 7.1 iFix011, 7.2 iFix003 27.09.2024 SB2024092751
SB2024100823
SB2024100827
and 32 more