CVE-2017-1096

IBM Jazz Reporting Service (JRS) 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 120656.

• CWE-79

• http://www.ibm.com/support/docview.wss?uid=swg22001007Vendor Advisory
• http://www.securityfocus.com/bid/99353Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/120656Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=swg22001007Vendor Advisory
• http://www.securityfocus.com/bid/99353Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/120656Vendor Advisory

Published

Jul 5, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-10954This vulnerability allows remote attackers to execute arbitr…
• CVE-2017-10955This vulnerability allows remote attackers to execute arbitr…8.8
• CVE-2017-10956This vulnerability allows remote attackers to disclose sensi…
• CVE-2017-10957This vulnerability allows remote attackers to execute arbitr…
• CVE-2017-10958This vulnerability allows remote attackers to execute arbitr…
• CVE-2017-10959This vulnerability allows remote attackers to execute arbitr…
• CVE-2017-10961REDCap before 7.5.1 has CSRF in the deletion feature of the …
• CVE-2017-10962REDCap before 7.5.1 has XSS via the query string.
• CVE-2017-10963In Knox SDS IAM (Identity Access Management) and EMM (Enterp…
• CVE-2017-10965An issue was discovered in Irssi before 1.0.4. When receivin…
• CVE-2017-10966An issue was discovered in Irssi before 1.0.4. While updatin…
• CVE-2017-10967In FineCMS before 2017-07-06, application\core\controller\co…