Known vulnerabilities in Jazz Reporting Service - page 5

Software CPE: cpe:2.3:a:ibm_corporation:jazz_reporting_service:*:*:*:*:*:*:*:*
Total vulnerabilities: 100
Public exploits: 6
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Jazz Reporting Service Jazz Reporting Service is affected by 100 known vulnerabilities: 10 high, 45 medium, 45 low Critical High Medium Low

Vulnerabilities (100)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU38788 - Exposure of sensitive information to an unauthorized actor
CVE-2017-1157
CWE-200 Low
No
No
- 05.07.2017 SB2016011002
#VU39758 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-5899
CWE-79 Low
No
No
- 01.02.2017 SB2016070806
#VU39759 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-6039
CWE-79 Low
No
No
- 01.02.2017 SB2016070806
#VU40001 - Improper Access Control
CVE-2016-0319
CWE-284 Medium
No
No
- 25.11.2016 SB2016070807
#VU40002 - Improper Access Control
CVE-2016-0318
CWE-284 Medium
No
No
- 25.11.2016 SB2016070807
#VU40003 - Improper Access Control
CVE-2016-0317
CWE-284 Medium
No
No
- 25.11.2016 SB2016070807
#VU40004 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-0316
CWE-79 Low
No
No
- 25.11.2016 SB2016070806
#VU40205 - Cross-Site Request Forgery (CSRF)
CVE-2016-2889
CWE-352 High
No
No
- 08.07.2016 SB2016070806
#VU40206 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-2888
CWE-79 Low
No
No
- 08.07.2016 SB2016070807
#VU40207 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-0350
CWE-79 Low
No
No
- 08.07.2016 SB2016070807
#VU40208 - Improper Access Control
CVE-2016-0315
CWE-284 High
No
No
- 08.07.2016 SB2016070807
#VU40209 - Improper input validation
CVE-2016-0314
CWE-20 Medium
No
No
- 08.07.2016 SB2016070807
#VU40210 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-0313
CWE-79 Low
No
No
- 08.07.2016 SB2016070807
#VU40504 - Improper input validation
CVE-2015-7464
CWE-20 Medium
No
No
- 29.01.2016 SB2016011002
#VU40520 - Permissions, Privileges, and Access Controls
CVE-2015-7469
CWE-264 Low
No
No
- 17.01.2016 SB2016011002
#VU40521 - Exposure of sensitive information to an unauthorized actor
CVE-2015-7470
CWE-200 Medium
No
No
- 17.01.2016 SB2016011002
#VU40522 - Permissions, Privileges, and Access Controls
CVE-2015-7468
CWE-264 Low
No
No
- 17.01.2016 SB2016011002
#VU40523 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-7467
CWE-79 Low
No
No
- 17.01.2016 SB2016011002
#VU40529 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2015-7466
CWE-74 Low
No
No
- 10.01.2016 SB2016011002
#VU40530 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-7465
CWE-79 Low
No
No
- 10.01.2016 SB2016011002


Showing elements 81 - 100 out of 100