VULNERABILITY INTELLIGENCE

CVE-2016-2889

CVSS score8.8 HIGH

EPSS probability0.54%

CISA KEVNot currently listed

Published2016-07-08

Last modified2026-06-17

Description

Cross-site request forgery (CSRF) vulnerability in the Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016, 6.0 and 6.0.1 before 6.0.1 ifix005, and 6.0.2 before ifix002 allows remote authenticated users to hijack the authentication of arbit... .