QwikSec

Security Database

CVE

CWE

Training

CVE-2018-1363

Published: Apr 25, 2018

Modified: Sep 17, 2024

PUBLISHED

Description

IBM Jazz Reporting Service (JRS) 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 137448.

Vendor	Product	Versions
IBM	Jazz Reporting Service	affected `5.0` affected `5.0.1` affected `5.0.2` affected `6.0` affected `6.0.1` +4 more versions

References

ibm-jazz-cve20181363-xss(137448)

vdb-entry

x_refsource_XF

http://www.ibm.com/support/docview.wss?uid=swg22015712

x_refsource_CONFIRM

vdb-entry

x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.