CVE-2017-1370: IBM Jazz Reporting Service

Medium severity, CVSS 4.9. EPSS: 1.2% chance of exploitation in the next 30 days.

IBM Jazz Reporting Service (JRS) 5.0 and 6.0 could disclose sensitive information, including user credentials, through an error message from the Report Builder administrator configuration page. IBM X-Force ID: 126863.

Affected products

• IBM Jazz Reporting Service: version 5.0 only; version 5.0.1 only; version 5.0.2 only; version 6.0 only; version 6.0.1 only; version 6.0.2 only; …

Published 2017-07-31. Last modified 2026-06-17.