VYPR
← All advisories
Low severity3.1NVD Advisory· Published Jan 10, 2016· Updated Jun 17, 2026

CVE-2015-7466

CVE-2015-7466

Description

Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service (JRS) 6.0 before 6.0.0-Rational-CLM-ifix005 allows remote authenticated users to conduct LDAP injection attacks, and consequently bypass intended query restrictions or modify the LDAP directory, via unspecified vectors.

Affected products

2
  • IBM/Jazz Reporting Servicellm-fuzzy2 versions
    <6.0.0-Rational-CLM-ifix005+ 1 more
    • (no CPE)range: <6.0.0-Rational-CLM-ifix005
    • cpe:2.3:a:ibm:jazz_reporting_service:6.0:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.