PT-2016-4141
CVE-2016-0316
·
تاريخ النشر
2016-11-25
·
تاريخ التحديث
2016-11-28
الوصف من
CVSS 3.1
5.4
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
IBM Jazz Reporting Service versions 6.0 through 6.0.1 before 6.0.1 iFix006
IBM Jazz Reporting Service version 6.0.2 before iFix003
Description
A cross-site scripting (XSS) issue in the Lifecycle Query Engine (LQE) of IBM Jazz Reporting Service allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. This could potentially lead to unauthorized actions on the affected system.
Recommendations
For IBM Jazz Reporting Service versions 6.0 through 6.0.1, apply iFix006 to resolve the issue.
For IBM Jazz Reporting Service version 6.0.2, apply iFix003 to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾