CVE-2016-0314

The Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 allow remote authenticated users to conduct clickjacking attacks via unspecified vectors.

Score

CVSS 3.0 6.5 Medium

Status

Modified - psirt@us.ibm.com

Published

2016-07-08

Last modified

2024-08-05

Affected products

• Jazz Reporting Service (Ibm)

References

• http://www-01.ibm.com/support/docview.wss?uid=swg21983147
• http://www.securityfocus.com/bid/91697