Skip to content

Known vulnerabilities in IBM Jazz Reporting Service

Is your version affected?

CVE Summary Score Published
CVE-2025-2134 IBM Jazz Reporting Service could allow an authenticated user on the network to affect the system's performance using… 3.5 Low Feb 4, 2026
CVE-2025-27550 IBM Jazz Reporting Service could allow an authenticated user on the host network to obtain sensitive information about… 3.5 Low Feb 4, 2026
CVE-2025-1823 IBM Jazz Reporting Service could allow an authenticated user on the host network to cause a denial of service using… 3.5 Low Feb 4, 2026
CVE-2024-25051 IBM Jazz Reporting Service 7.0.2 and 7.0.3 does not invalidate session after logout which could allow an authenticated… 6.6 Medium Apr 2, 2025
CVE-2024-25052 IBM Jazz Reporting Service 7.0.3 stores user credentials in plain clear text which can be read by an admin user 4.4 Medium Jun 13, 2024
CVE-2021-20535 IBM Jazz Reporting Service 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to server-side request forgery (SSRF) 6.5 Medium May 13, 2021
CVE-2020-4933 IBM Jazz Reporting Service 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting 5.4 Medium Feb 18, 2021
CVE-2020-4718 IBM Jazz Reporting Service 6.0.6, 6.0.6.1, 7.0, and 7.0.1 is vulnerable to stored cross-site scripting 6.4 Medium Nov 19, 2020
CVE-2020-4541 IBM Jazz Reporting Service 7.0 and 7.0.1 is vulnerable to cross-site scripting 6.1 Medium Aug 10, 2020
CVE-2020-4539 IBM Jazz Reporting Service 6.0.2, 6.0.6, 6.0.6.1, 7.0, and 7.0.1 is vulnerable to cross-site scripting 6.1 Medium Aug 10, 2020
CVE-2020-4533 IBM Jazz Reporting Service 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting 6.1 Medium Aug 10, 2020
CVE-2020-4419 IBM Jazz Reporting Service 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting 5.4 Medium May 28, 2020
CVE-2019-4497 IBM Jazz Reporting Service (JRS) 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 is vulnerable to… 5.4 Medium Oct 1, 2019
CVE-2019-4495 IBM Jazz Reporting Service (JRS) 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 is vulnerable to… 5.4 Medium Oct 1, 2019
CVE-2019-4494 IBM Jazz Reporting Service (JRS) 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 is vulnerable to… 5.4 Medium Oct 1, 2019
CVE-2019-4184 IBM Jazz Reporting Service 6.0 through 6.0.6.1 is vulnerable to cross-site scripting 5.4 Medium May 29, 2019
CVE-2019-4047 IBM Jazz Reporting Service (JRS) 6.0.6 could allow an authenticated user to access the execution log files as a guest… 4.3 Medium Apr 29, 2019
CVE-2018-2004 IBM Jazz Reporting Service (JRS) 6.0 through 6.0.6 is vulnerable to cross-site scripting 5.4 Medium Apr 29, 2019
CVE-2018-1918 IBM Jazz Reporting Service (JRS) 6.0.3, 6.0.4, 6.0.5, and 6.0.6 is vulnerable to cross-site scripting 5.4 Medium Jan 8, 2019
CVE-2018-1639 The Report Builder of Jazz Reporting Service 5.0 through 5.0.2 and 6.0 through 6.0.6 could allow an authenticated user… 4.3 Medium Nov 16, 2018
CVE-2018-1363 IBM Jazz Reporting Service (JRS) 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to cross-site scripting Not rated Apr 25, 2018
CVE-2017-1750 IBM Jazz Reporting Service (JRS) 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to cross-site scripting Not rated Apr 25, 2018
CVE-2017-1340 IBM Jazz Reporting Service (JRS) 6.0.4 could allow an authenticated user to obtain information on another server that… Not rated Nov 1, 2017
CVE-2017-1490 An unspecified vulnerability in the Lifecycle Query Engine of Jazz Reporting Service 6.0 through 6.0.4 could disclose… Not rated Sep 14, 2017
CVE-2017-1370 IBM Jazz Reporting Service (JRS) 5.0 and 6.0 could disclose sensitive information, including user credentials, through… Not rated Jul 31, 2017

Other IBM products