CVE-2019-4651: IBM Jazz Reporting Service

Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days.

IBM Jazz Reporting Service (JRS) 6.0.6.1 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 170962.

Affected products

• IBM Jazz Reporting Service: version 6.0.6.1 only

Published 2020-01-09. Last modified 2026-06-17.