What is the severity of CVE-2020-4933?

The severity of CVE-2020-4933 is medium.

What is the impact of CVE-2020-4933?

CVE-2020-4933 allows users to embed arbitrary JavaScript code in the Web UI, potentially leading to credentials disclosure within a trusted session.

How can I fix CVE-2020-4933?

You can fix CVE-2020-4933 by applying the appropriate patch provided by IBM for the affected versions of Jazz Reporting Service.

Where can I find more information about CVE-2020-4933?

You can find more information about CVE-2020-4933 on the IBM X-Force Exchange website and the IBM support pages.

What is the Common Weakness Enumeration (CWE) of CVE-2020-4933?

The Common Weakness Enumeration (CWE) of CVE-2020-4933 is CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting').

Vulnerability/
CVE-2020-4933

medium

5.4

CWE

17/2/2021

22/2/2021

CVE-2020-4933: XSS

First published: Wed Feb 17 2021(Updated: )

IBM Jazz Reporting Service is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Credit: psirt@us.ibm.com

Affected Software	Affected Version	How to fix
IBM Jazz Reporting Service	<=7.0.2
IBM Jazz Reporting Service	<=7.0.1
IBM Jazz Reporting Service	<=7.0
IBM Jazz Reporting Service	<=6.0.6.1
IBM Jazz Reporting Service	=6.0.6.1
IBM Jazz Reporting Service	=7.0
IBM Jazz Reporting Service	=7.0.1
IBM Jazz Reporting Service	=7.0.2
Linux Linux kernel
Microsoft Windows

Never miss a vulnerability like this again

Reference Links

Parent vulnerabilities

(Appears in the following advisories)

IBM-6415911

Frequently Asked Questions

What is the severity of CVE-2020-4933?
The severity of CVE-2020-4933 is medium.
What is the impact of CVE-2020-4933?
CVE-2020-4933 allows users to embed arbitrary JavaScript code in the Web UI, potentially leading to credentials disclosure within a trusted session.
How can I fix CVE-2020-4933?
You can fix CVE-2020-4933 by applying the appropriate patch provided by IBM for the affected versions of Jazz Reporting Service.
Where can I find more information about CVE-2020-4933?
You can find more information about CVE-2020-4933 on the IBM X-Force Exchange website and the IBM support pages.
What is the Common Weakness Enumeration (CWE) of CVE-2020-4933?
The Common Weakness Enumeration (CWE) of CVE-2020-4933 is CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting').

collector/ibm-support
collector/nvd-index
vendor/ibm
canonical/ibm jazz reporting service
version/ibm jazz reporting service/7.0.2
version/ibm jazz reporting service/7.0.1
version/ibm jazz reporting service/7.0
version/ibm jazz reporting service/6.0.6.1
vendor/linux
canonical/linux linux kernel
vendor/microsoft
canonical/microsoft windows

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.