CVE-2019-4184

https://notcve.org/view.php?id=CVE-2019-4184

29 May 2019 — IBM Jazz Reporting Service 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 158974. IBM Jazz Reporting Service versión 6.0 hasta 6.0.6.1, es vulnerable a cross-site scripting. Esta vulnerabilidad permite a los usuarios insertar código JavaScript arbitrario en la web UI, y en consecuencia, al... • http://www.securityfocus.com/bid/108529 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •