CVE-2016-0350 in Jazz Reporting Serviceالمعلومات

الملخص

بحسب MITRE

Cross-site scripting (XSS) vulnerability in the Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-2888 and CVE-2016-0313.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

حجز

08/12/2015

إفشاء

07/07/2016

الاعتدال

تمت الموافقة

إدخال

VDB-88815

EPSS

0.00622

KEV

لا

النشاطات

منخفض جدًا

المصادر

Want to know what is going to be exploited?

We predict KEV entries!