VYPR
← All advisories
Low severity3.1NVD Advisory· Published Jan 10, 2016· Updated Jun 17, 2026

CVE-2015-7466

CVE-2015-7466

Description

Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service (JRS) 6.0 before 6.0.0-Rational-CLM-ifix005 allows remote authenticated users to conduct LDAP injection attacks, and consequently bypass intended query restrictions or modify the LDAP directory, via unspecified vectors.

Affected products

2
  • IBM/Jazz Reporting Service2 versions
    cpe:2.3:a:ibm:jazz_reporting_service:6.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:jazz_reporting_service:6.0:*:*:*:*:*:*:*
    • (no CPE)range: <6.0.0-Rational-CLM-ifix005

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.