Known vulnerabilities in Jazz Reporting Service - page 4

Software CPE: cpe:2.3:a:ibm_corporation:jazz_reporting_service:*:*:*:*:*:*:*:*
Total vulnerabilities: 100
Public exploits: 6
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Jazz Reporting Service Jazz Reporting Service is affected by 100 known vulnerabilities: 10 high, 45 medium, 45 low Critical High Medium Low

Vulnerabilities (100)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU34880 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2019-4651
CWE-89 High
No
No
- 09.01.2020 SB2019100133
#VU35202 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-4494
CWE-79 Low
No
No
- 01.10.2019 SB2019100133
#VU35203 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-4495
CWE-79 Low
No
No
- 01.10.2019 SB2019100133
#VU35204 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-4497
CWE-79 Low
No
No
- 01.10.2019 SB2019100133
#VU35948 - Exposure of sensitive information to an unauthorized actor
CVE-2019-4047
CWE-200 Low
No
No
- 29.04.2019 SB2019042918
#VU16955 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-1918
CWE-79 Low
No
No
- 13.01.2019 SB2019011314
#VU37156 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-1750
CWE-79 Low
No
No
- 25.04.2018 SB2018042530
#VU37157 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-1363
CWE-79 Low
No
No
- 25.04.2018 SB2018042530
#VU37990 - Exposure of sensitive information to an unauthorized actor
CVE-2017-1340
CWE-200 Medium
No
No
- 01.11.2017 SB2017073121
#VU38288 - Exposure of sensitive information to an unauthorized actor
CVE-2017-1490
CWE-200 Medium
No
No
- 14.09.2017 SB2017073121
#VU38621 - Information Exposure Through an Error Message
CVE-2017-1370
CWE-209 Medium
No
No
- 31.07.2017 SB2017073121
#VU38787 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-1096
CWE-79 Low
No
No
- 05.07.2017 SB2017070519
#VU38789 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-9986
CWE-79 Low
No
No
- 05.07.2017 SB2017070519
#VU38790 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-9987
CWE-79 Low
No
No
- 05.07.2017 SB2017070519
#VU38791 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-9988
CWE-79 Low
No
No
- 05.07.2017 SB2017070519
#VU38792 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-9989
CWE-79 Low
No
No
- 05.07.2017 SB2017070519
#VU39754 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-6047
CWE-79 Low
No
No
- 01.02.2017 SB2016070806
#VU39755 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-6054
CWE-79 Low
No
No
- 01.02.2017 SB2016070806
#VU39756 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-5897
CWE-79 Low
No
No
- 01.02.2017 SB2016070806
#VU39757 - Security Features
CVE-2016-5898
CWE-254 Low
No
No
- 01.02.2017 SB2016070806


Showing elements 61 - 80 out of 100