VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Nov 25, 2016· Updated Jun 17, 2026

CVE-2016-0316

CVE-2016-0316

Description

Cross-site scripting (XSS) vulnerability in Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service 6.0 and 6.0.1 before 6.0.1 iFix006 and 6.0.2 before iFix003 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • IBM/Jazz Reporting Service4 versions
    cpe:2.3:a:ibm:jazz_reporting_service:6.0:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:ibm:jazz_reporting_service:6.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:jazz_reporting_service:6.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:jazz_reporting_service:6.0.2:*:*:*:*:*:*:*
    • (no CPE)range: <6.0.1 iFix006, <6.0.2 iFix003
  • IBM/Lifecycle Query Engine (LQE)llm-fuzzy
    Range: <6.0.1 iFix006, <6.0.2 iFix003

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.