CVE-2016-6047: XSS

Published Feb 1, 2017

Updated

IBM Jazz Reporting Service (JRS) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Affected Software

1 affected component

IBM Jazz Reporting Service=6.0.2

Remediation

Patch Available

http://www.ibm.com/support/docview.wss?uid=swg21991154

Event History

Feb 1, 2017

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

DescriptionWeakness

Data Sourced

via NVD·08:59 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2016-6047?

CVE-2016-6047 has a medium severity rating due to the potential for cross-site scripting attacks that can lead to user credential exposure.

How do I fix CVE-2016-6047?

To fix CVE-2016-6047, update IBM Jazz Reporting Service to a patched version that addresses the cross-site scripting vulnerability.

What versions of IBM Jazz Reporting Service are affected by CVE-2016-6047?

CVE-2016-6047 affects IBM Jazz Reporting Service version 6.0.2.

What type of vulnerability is CVE-2016-6047?

CVE-2016-6047 is classified as a cross-site scripting (XSS) vulnerability.

What can attackers do through CVE-2016-6047?

Attackers can potentially embed arbitrary JavaScript code in the Web UI, compromising the integrity of the user session.