CVE-2015-7469: IBM Jazz Reporting Service

Medium severity, CVSS 4.3. EPSS: 0.9% chance of exploitation in the next 30 days.

Report Builder in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2-Rational-CLM-ifix011 and 6.0 before 6.0.0-Rational-CLM-ifix005 allows remote authenticated users to bypass intended read-only restrictions by leveraging a JazzGuest role.

Affected products

• IBM Jazz Reporting Service: version 5.0 only; version 5.0.1 only; version 5.0.2 only; version 6.0 only

Published 2016-01-17. Last modified 2026-06-17.