Known vulnerabilities in Jazz Reporting Service - page 2

Software CPE: cpe:2.3:a:ibm_corporation:jazz_reporting_service:*:*:*:*:*:*:*:*
Total vulnerabilities: 100
Public exploits: 6
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Jazz Reporting Service Jazz Reporting Service is affected by 100 known vulnerabilities: 10 high, 45 medium, 45 low Critical High Medium Low

Vulnerabilities (100)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU85469 - Improper input validation
CVE-2024-20952
CWE-20 Medium
No
No
- 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 189 more
#VU85470 - Improper input validation
CVE-2024-20919
CWE-20 Medium
No
No
- 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 164 more
#VU85472 - Improper input validation
CVE-2024-20926
CWE-20 Medium
No
No
- 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 164 more
#VU85473 - Improper input validation
CVE-2024-20945
CWE-20 Low
No
No
- 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 177 more
#VU82583 - Observable discrepancy
CVE-2023-33850
CWE-203 Medium
No
No
- 31.10.2023 SB2023103131
SB2023111305
SB2023111407
and 106 more
#VU82534 - Resource exhaustion
CVE-2013-4002
CWE-400 Medium
No
No
7.0.2 iFix022 27.10.2023 SB2023102710
SB2023102722
SB2023103009
and 14 more
#VU82122 - Improper input validation
CVE-2023-35116
CWE-20 Low
No
No
7.0.2 iFix022 17.10.2023 SB2023101771
SB20231018117
SB2023101925
and 45 more
#VU72427 - Allocation of Resources Without Limits or Throttling
CVE-2023-24998
CWE-770 Medium
Available
No
7.0.2 iFix026 20.02.2023 SB2023022046
SB2023022047
SB2023030917
and 202 more
#VU68307 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-42889
CWE-94 High
Available
Exploited
7.0.2 iFix021 14.10.2022 SB2022101405
SB2022102709
SB2022110306
and 91 more
#VU67586 - Server-Side Request Forgery (SSRF)
CVE-2022-38648
CWE-918 Medium
No
No
7.0.2 iFix021 22.09.2022 SB2022092232
SB2023030742
SB2023040503
and 14 more
#VU67585 - Server-Side Request Forgery (SSRF)
CVE-2022-40146
CWE-918 Medium
Available
No
7.0.2 iFix021 22.09.2022 SB2022092232
SB2023011763
SB2023011838
and 21 more
#VU67584 - Server-Side Request Forgery (SSRF)
CVE-2022-38398
CWE-918 Medium
No
No
7.0.2 iFix021 22.09.2022 SB2022092232
SB2023030742
SB2023040503
and 14 more
#VU64957 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-33980
CWE-94 High
Available
No
7.0.2 iFix021 06.07.2022 SB2022070645
SB2022072604
SB2022081517
and 31 more
#VU61799 - Out-of-bounds write
CVE-2020-36518
CWE-787 Medium
No
No
7.0.2 iFix022 01.04.2022 SB2022040113
SB2022040114
SB2022040115
and 147 more
#VU59965 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-23437
CWE-835 Medium
No
No
7.0.2 iFix022 25.01.2022 SB2022012503
SB2022041946
SB2022042249
and 92 more
#VU55416 - Improper input validation
CVE-2012-0881
CWE-20 Medium
No
No
7.0.2 iFix022 28.07.2021 SB2021072822
SB2023070731
SB2023102710
and 19 more
#VU52252 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-29425
CWE-22 Low
No
No
7.0.2 iFix026 15.04.2021 SB2021041510
SB2021081922
SB2021093016
and 121 more
#VU50139 - Incorrect Default Permissions
CVE-2020-8908
CWE-276 Low
No
No
7.0.2 iFix022 11.12.2020 SB2020121114
SB2021031707
SB2021042104
and 62 more
#VU47481 - Improper input validation
CVE-2020-13956
CWE-20 Medium
No
No
7.0.2 iFix022 09.10.2020 SB2020100902
SB2020101604
SB2021042104
and 77 more
#VU26146 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-1953
CWE-94 Medium
No
No
7.0.2 iFix021 17.03.2020 SB2020031715
SB2020102941
SB2022090817
and 3 more


Showing elements 21 - 40 out of 100