Ibm: >> Jazz Reporting Service >> 7.0.3 Security Vulnerabilities
IBM Jazz Reporting Service could allow an authenticated user on the host network to cause a denial of service using specially crafted SQL query that consumes excess memory resources.
CVSS Score
3.5
EPSS Score
0.0
Published
2026-02-04
IBM Jazz Reporting Service could allow an authenticated user on the host network to obtain sensitive information about other projects that reside on the server.
CVSS Score
3.5
EPSS Score
0.0
Published
2026-02-04
IBM Jazz Reporting Service could allow an authenticated user on the network to affect the system's performance using complicated queries due to insufficient resource pooling.
CVSS Score
3.5
EPSS Score
0.0
Published
2026-02-04
IBM Jazz Reporting Service 7.0.2 and 7.0.3 does not invalidate session after logout which could allow an authenticated privileged user to impersonate another user on the system.
CVSS Score
6.6
EPSS Score
0.002
Published
2025-04-02
IBM Jazz Reporting Service 7.0.3 stores user credentials in plain clear text which can be read by an admin user. IBM X-Force ID: 283363.
CVSS Score
4.4
EPSS Score
0.0
Published
2024-06-13