4.3
Medium
CVE-2018-1639 The Report Builder of Jazz Reporting Service 5.0 through 5.0.2 and 6.0 through 6.0.6 could allow an authenticated user…
Description
The Report Builder of Jazz Reporting Service 5.0 through 5.0.2 and 6.0 through 6.0.6 could allow an authenticated user to obtain sensitive information beyond its assigned privileges. IBM X-Force ID: 144579.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jazz Reporting Service 6.0 | 6.0 → 6.0.6 | No fix stated |
| Jazz Reporting Service 5.0 | 5.0 → 5.0.2 | No fix stated |
Other CVEs of Jazz Reporting Service
The 31 CVEs of Jazz Reporting Service →
CVE-2025-2134
IBM Jazz Reporting Service could allow an authenticated user on the network to affect the system's performance using…
3.5
Low
CVE-2025-27550
IBM Jazz Reporting Service could allow an authenticated user on the host network to obtain sensitive information about…
3.5
Low
CVE-2025-1823
IBM Jazz Reporting Service could allow an authenticated user on the host network to cause a denial of service using…
3.5
Low
CVE-2024-25051
IBM Jazz Reporting Service 7.0.2 and 7.0.3 does not invalidate session after logout which could allow an authenticated…
6.6
Medium