CVE-2017-1370

概要

参考情報

• ibm.com/support/docview.wss · Vendor Advisory
• securityfocus.com/bid/99954 · Third Party Advisory
• exchange.xforce.ibmcloud.com/vulnerabilities/126863 · VDB Entry

jazz reporting service のその他の脆弱性

• CVE-2025-2134低 3.5IBM Jazz Reporting Service could allow an authenticated user on the network to affect the system's performance using complicated queries due…
• CVE-2025-27550低 3.5IBM Jazz Reporting Service could allow an authenticated user on the host network to obtain sensitive information about other projects that r…
• CVE-2025-1823低 3.5IBM Jazz Reporting Service could allow an authenticated user on the host network to cause a denial of service using specially crafted SQL qu…
• CVE-2024-25051高 7.2IBM Jazz Reporting Service 7.0.2 and 7.0.3 does not invalidate session after logout which could allow an authenticated privileged user to im…
• CVE-2024-25052中 4.4IBM Jazz Reporting Service 7.0.3 stores user credentials in plain clear text which can be read by an admin user. IBM X-Force ID: 283363.