CVE-2016-9988: XSS
IBM Jazz Foundation Reporting Service (JRS) 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 120554.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-9988?
CVE-2016-9988 is classified as a medium severity vulnerability due to its potential to allow cross-site scripting exploits.
How does CVE-2016-9988 affect IBM Jazz Reporting Service?
CVE-2016-9988 affects IBM Jazz Reporting Service versions 5.0 and 6.0 by allowing users to inject arbitrary JavaScript into the web interface.
How do I fix CVE-2016-9988?
To fix CVE-2016-9988, IBM recommends upgrading to a patched version of the Jazz Reporting Service that addresses the XSS vulnerability.
What are the risks associated with not addressing CVE-2016-9988?
Not addressing CVE-2016-9988 can lead to unauthorized script execution in user sessions, risking credential disclosure and unauthorized access.
What versions of IBM Jazz Reporting Service are affected by CVE-2016-9988?
CVE-2016-9988 affects IBM Jazz Reporting Service versions 5.0, 5.0.1, 5.0.2 and 6.0 through 6.0.3.