CVE-2016-5898

IBM Jazz Reporting Service (JRS) could allow a remote attacker to obtain sensitive information, caused by not restricting JSON serialization

published February 1, 2017

CVSS
—
EPSS
1%
Percentile
60.4
In the wild
Unconfirmed
What it is

IBM Jazz Reporting Service (JRS) could allow a remote attacker to obtain sensitive information, caused by not restricting JSON serialization. By sending a direct request, an attacker could exploit this vulnerability to obtain sensitive information.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00941 · 60.4th percentile
Published
2017-02-01T20:00Z
EPSS history
Timeline
  • 01 FEB 20:00Z
    IBM Jazz Reporting Service (JRS) could allow a remote attacker to obtain sensitive information, caused by not restricting JSON serialization
    cvelistv5