Direct naar de inhoud
⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
cybernieuws.nl Cybersecurity en informatiebeveiling nieuws alerts live · net nu 163 bronnen 59 vandaag
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2016-0350

MEDIUM · 5.4 CVSS Gepubliceerd: CWE-79

Beschrijving

Cross-site scripting (XSS) vulnerability in the Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-2888 and CVE-2016-0313.

Vendors

Ibm

Affected products

Jazz Reporting Service

References