Description
The Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 allow remote authenticated users to conduct clickjacking attacks via unspecified vectors.
Metrics
CVSS 3.0 6.5/10
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:NAffected software
No affected versions have been published.
Timeline
- Published
- Jul 8, 2016
- Last modified
- Jun 17, 2026
- NVD status
- Modified