CVE-2017-1750: XSS
First published: Wed Apr 25 2018(Updated: )
IBM Jazz Reporting Service (JRS) 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 135523.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Jazz Reporting Service | =5.0 | |
| IBM Jazz Reporting Service | =5.0.1 | |
| IBM Jazz Reporting Service | =5.0.2 | |
| IBM Jazz Reporting Service | =6.0 | |
| IBM Jazz Reporting Service | =6.0.1 | |
| IBM Jazz Reporting Service | =6.0.2 | |
| IBM Jazz Reporting Service | =6.0.3 | |
| IBM Jazz Reporting Service | =6.0.4 | |
| IBM Jazz Reporting Service | =6.0.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2017-1750?
CVE-2017-1750 is a vulnerability in IBM Jazz Reporting Service (JRS) 5.0 through 5.0.2 and 6.0 through 6.0.5 that allows for cross-site scripting.
How does CVE-2017-1750 affect IBM Jazz Reporting Service?
CVE-2017-1750 affects IBM Jazz Reporting Service versions 5.0 through 5.0.2 and 6.0 through 6.0.5 by allowing users to embed arbitrary JavaScript code in the Web UI, potentially leading to credentials disclosure within a trusted session.
What is the severity of CVE-2017-1750?
CVE-2017-1750 has a severity rating of medium with a score of 5.4.
How can I fix CVE-2017-1750?
To fix CVE-2017-1750, you should update IBM Jazz Reporting Service to a version that is not vulnerable, as recommended by IBM.
Where can I find more information about CVE-2017-1750?
You can find more information about CVE-2017-1750 on the IBM support website, the SecurityFocus website, and the IBM X-Force Exchange website.
- collector/nvd-index
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/type
- agent/event
- agent/description
- agent/remedy
- agent/last-modified-date
- agent/first-publish-date
- agent/tags
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- vendor/ibm
- canonical/ibm jazz reporting service
- version/ibm jazz reporting service/5.0
- version/ibm jazz reporting service/5.0.1
- version/ibm jazz reporting service/5.0.2
- version/ibm jazz reporting service/6.0
- version/ibm jazz reporting service/6.0.1
- version/ibm jazz reporting service/6.0.2
- version/ibm jazz reporting service/6.0.3
- version/ibm jazz reporting service/6.0.4
- version/ibm jazz reporting service/6.0.5