CVE-2017-1096: IBM Jazz Reporting Service (JRS) 5.0 and 6.0 is vulnerable to cross-site scripting.

Security readout for executives and security teams

IBM Jazz Reporting Service 5.0 and 6.0 versions had a web interface flaw that could let a user place JavaScript into the application. In a trusted session, that script could change what the user sees or potentially expose credentials. The supplied sources do not provide CVSS scoring or evidence of active exploitation. Exposure is limited to environments running IBM Jazz Reporting Service 5.0, 5.0.1, 5.0.2, 6.0, 6.0.1, 6.0.2, or 6.0.3. Risk is higher where the JRS web interface is reachable by lower-trust authenticated users or broadly accessible internal populations. Prioritize remediation for any reachable JRS deployment on the affected versions, especially where many users share access. The issue can affect credential confidentiality, but the supplied evidence does not indicate emergency exploitation conditions. Mitigation focus: Identify all IBM Jazz Reporting Service deployments and versions.; Review IBM advisory swg22001007 for vendor-approved fixes or upgrade guidance.; Limit JRS web access to trusted users and networks where feasible..

Prepared

Jun 13, 2026, 04:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.