Vulnerability Details CVE-2016-0314
The Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 allow remote authenticated users to conduct clickjacking attacks via unspecified vectors.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 36.7%
CVSS Severity
CVSS v3 Score 6.5
CVSS v2 Score 4.0
References
Products affected by CVE-2016-0314
-
cpe:2.3:a:ibm:jazz_reporting_service:5.0
-
cpe:2.3:a:ibm:jazz_reporting_service:5.0.1
-
cpe:2.3:a:ibm:jazz_reporting_service:5.0.2
-
cpe:2.3:a:ibm:jazz_reporting_service:6.0
-
cpe:2.3:a:ibm:jazz_reporting_service:6.0.1