CVE-2016-6039: XSS
IBM Jazz Reporting Service (JRS) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-6039?
CVE-2016-6039 is classified as a high severity vulnerability due to the potential for cross-site scripting exploits.
How do I fix CVE-2016-6039?
To remediate CVE-2016-6039, apply the latest updates provided by IBM for Jazz Reporting Service.
What impact does CVE-2016-6039 have on users?
CVE-2016-6039 allows attackers to execute arbitrary JavaScript in a user's browser, which may lead to credential theft.
Which versions of IBM Jazz Reporting Service are affected by CVE-2016-6039?
CVE-2016-6039 affects IBM Jazz Reporting Service versions 6.0, 6.0.1, and 6.0.2.
Is there a workaround for CVE-2016-6039 until a fix is applied?
The best workaround for CVE-2016-6039 is to restrict access to the Jazz Reporting Service until a software update is applied.