Vulnerability Details CVE-2021-20535
IBM Jazz Reporting Service 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 198834.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 27.5%
CVSS Severity
CVSS v3 Score 6.5
CVSS v2 Score 5.5
References
Products affected by CVE-2021-20535
-
cpe:2.3:a:ibm:jazz_reporting_service:6.0.6.1
-
cpe:2.3:a:ibm:jazz_reporting_service:7.0
-
cpe:2.3:a:ibm:jazz_reporting_service:7.0.1
-
cpe:2.3:a:ibm:jazz_reporting_service:7.0.2