CVE-2017-1157

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

IBM Jazz Reporting Service (JRS) 5.0 and 6.0 could allow an authenticated attacker to access report data that should be restricted to authorized users. IBM X-Force ID: 122788.

Metrics

CVSS 3.0 4.3/10CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
IBM	Jazz Reporting Service	5.0; 5.0.1; 5.0.2; 6.0; 6.0.1; 6.0.2; 6.0.3

References

http://www.ibm.com/support/docview.wss?uid=swg22001007VDB Entry
http://www.securityfocus.com/bid/99353Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/122778VDB Entry, Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg22001007VDB Entry
http://www.securityfocus.com/bid/99353Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/122778VDB Entry, Vendor Advisory

Timeline

Published: Jul 5, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-115707.8FontForge 20161012 is vulnerable to a buffer over-read in umodenc (parsettf.c) resulting in DoS or code execution via a crafted otf file.CVE-2017-115717.8FontForge 20161012 is vulnerable to a stack-based buffer overflow in addnibble (parsettf.c) resulting in DoS or code execution via a crafted CVE-2017-115727.8FontForge 20161012 is vulnerable to a heap-based buffer over-read in readcfftopdicts (parsettf.c) resulting in DoS or code execution via a c CVE-2017-115737.8FontForge 20161012 is vulnerable to a buffer over-read in ValidatePostScriptFontName (parsettf.c) resulting in DoS or code execution via a c CVE-2017-115747.8FontForge 20161012 is vulnerable to a heap-based buffer overflow in readcffset (parsettf.c) resulting in DoS or code execution via a crafted CVE-2017-115757.8FontForge 20161012 is vulnerable to a buffer over-read in strnmatch (char.c) resulting in DoS or code execution via a crafted otf file, rela CVE-2017-115765.5FontForge 20161012 does not ensure a positive size in a weight vector memcpy call in readcfftopdict (parsettf.c) resulting in DoS via a craf CVE-2017-115777.8FontForge 20161012 is vulnerable to a buffer over-read in getsid (parsettf.c) resulting in DoS or code execution via a crafted otf file.CVE-2017-115785.9It was discovered as a part of the research on IoT devices in the most recent firmware for Blipcare device that the device allows to connect CVE-2017-115797.1In the most recent firmware for Blipcare, the device provides an open Wireless network called "Blip" for communicating with the device. The CVE-2017-115806.5Blipcare Wifi blood pressure monitor BP700 10.1 devices allow memory corruption that results in Denial of Service. When connected to the "Bl CVE-2017-115816.1dayrui FineCms 5.0.9 has Cross Site Scripting (XSS) in admin/Login.php via a payload in the username field that does not begin with a '<' ch