CVE-2016-9987: XSS
IBM Jazz Foundation Reporting Service (JRS) 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 120553.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-9987?
CVE-2016-9987 is classified as a high severity vulnerability due to the potential for credential disclosure and arbitrary code execution.
How do I fix CVE-2016-9987?
To fix CVE-2016-9987, users should update to the latest patched version of IBM Jazz Reporting Service.
What versions of IBM Jazz Reporting Service are affected by CVE-2016-9987?
CVE-2016-9987 affects IBM Jazz Reporting Service versions 5.0, 5.0.1, 5.0.2, 6.0, 6.0.1, 6.0.2, and 6.0.3.
What type of vulnerability is CVE-2016-9987?
CVE-2016-9987 is a cross-site scripting (XSS) vulnerability.
What are the impacts of CVE-2016-9987?
The impacts of CVE-2016-9987 include unauthorized embedding of JavaScript in the Web UI, which may lead to functionality alteration and credential disclosure.