Known vulnerabilities in Jazz Reporting Service - page 3

Software CPE: cpe:2.3:a:ibm_corporation:jazz_reporting_service:*:*:*:*:*:*:*:*
Total vulnerabilities: 100
Public exploits: 6
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Jazz Reporting Service Jazz Reporting Service is affected by 100 known vulnerabilities: 10 high, 45 medium, 45 low Critical High Medium Low

Vulnerabilities (100)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU77107 - Incorrect Default Permissions
CVE-2023-2976
CWE-276 Low
No
No
7.0.2 iFix022 08.06.2023 SB2023060849
SB2023071712
SB2023072512
and 157 more
#VU75645 - Integer overflow
CVE-2018-18928
CWE-190 High
No
No
7.0.2 iFix021 02.05.2023 SB2023050209
SB2023100524
SB2023120172
and 1 more
#VU70441 - Insufficient Verification of Data Authenticity
CVE-2021-37533
CWE-345 Low
No
No
7.0.2 iFix024 20.12.2022 SB2022122007
SB2022123001
SB2023011876
and 82 more
#VU68832 - Resource exhaustion
CVE-2022-42004
CWE-400 Medium
No
No
7.0.2 iFix022 31.10.2022 SB2022103116
SB2022103117
SB2022111404
and 122 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003
CWE-502 Medium
No
No
7.0.2 iFix022 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU65835 - Incorrect Regular Expression
CVE-2022-31129
CWE-185 Medium
No
No
7.0.2 iFix021 27.07.2022 SB2022072729
SB2022072901
SB2022081048
and 102 more
#VU62831 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2022-28890
CWE-611 Medium
No
No
7.0.2 iFix021 05.05.2022 SB2022050531
SB2023070408
SB2023100469
and 4 more
#VU62463 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-24785
CWE-22 Medium
No
No
7.0.2 iFix021 20.04.2022 SB2022042016
SB2022042017
SB2022060317
and 65 more
#VU62399 - Improper input validation
CVE-2022-21426
CWE-20 Medium
No
No
7.1.5.17, 8.0.8.0 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 129 more
#VU56669 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-39239
CWE-611 High
No
No
7.0.2 iFix021 16.09.2021 SB2021091620
SB2023041243
SB2023070408
and 5 more
#VU54291 - Server-Side Request Forgery (SSRF)
CVE-2020-11988
CWE-918 Medium
No
No
7.0.2 iFix021 21.06.2021 SB2021062143
SB2021062144
SB2021062145
and 15 more
#VU45881 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-4533
CWE-79 Low
No
No
- 10.08.2020 SB2020081029
#VU45882 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-4539
CWE-79 Low
No
No
- 10.08.2020 SB2020081030
#VU45883 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-4541
CWE-79 Low
No
No
- 10.08.2020 SB2020081030
#VU29068 - Server-Side Request Forgery (SSRF)
CVE-2019-17566
CWE-918 Medium
No
No
7.0.2 iFix021 16.06.2020 SB2020061613
SB2020062304
SB2020072310
and 23 more
#VU34379 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-4419
CWE-79 Low
No
No
- 28.05.2020 SB2020052816
#VU27250 - Improper input validation
CVE-2015-0254
CWE-20 Medium
No
No
7.0.2 iFix022 23.04.2020 SB2020042337
SB2015092202
SB2017062712
and 6 more
#VU21762 - Resource Management Errors
CVE-2016-4055
CWE-399 Medium
No
No
7.0.2 iFix021 14.10.2019 SB2017012304
SB2023100518
SB2024050806
and 1 more
#VU18092 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2019-11358
CWE-1321 Low
Available
No
7.0.2 iFix025 28.03.2019 SB2019032804
SB2019041026
SB2019041801
and 155 more
#VU11300 - Resource exhaustion
CVE-2017-18214
CWE-400 Low
No
No
7.0.2 iFix021 28.03.2018 SB2017090813
SB2022022516
SB2022101031
and 8 more


Showing elements 41 - 60 out of 100