{"id":"CVE-2016-0314","aliases":["EUVD-2016-0349","GHSA-q3fq-h8rr-v5jf"],"status":"published","title":"The Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x...","description":"The Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 allow remote authenticated users to conduct clickjacking attacks via unspecified vectors.","severity":{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00884,"percentile":0.59453,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2016-07-08T01:00:00Z","modified":"2026-06-17T00:37:19Z","products":[{"vendor":"ibm","product":"jazz_reporting_service"}],"references":[{"url":"http://www.securityfocus.com/bid/91697","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21983147","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0314"},{"url":"https://github.com/advisories/GHSA-q3fq-h8rr-v5jf"}],"sources":{"cve":[{"id":"CVE-2016-0314","description":"The Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 allow remote authenticated users to conduct clickjacking attacks via unspecified vectors.","status":"published","published":"2016-07-08T01:00:00Z","modified":"2024-08-05T22:15:23.312Z","updated_at":"2026-11-02T14:33:37.12286Z"}],"euvd":[{"id":"EUVD-2016-0349","description":"The Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 allow remote authenticated users to conduct clickjacking attacks via unspecified vectors.","status":"published","published":"2016-07-08T01:00:00Z","modified":"2024-08-05T22:15:23Z","updated_at":"2026-11-03T02:23:01.859008Z"}],"ghsa":[{"id":"GHSA-q3fq-h8rr-v5jf","title":"The Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x...","description":"The Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 allow remote authenticated users to conduct clickjacking attacks via unspecified vectors.","status":"published","published":"2022-05-17T03:43:34Z","modified":"2023-01-27T05:09:04Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T14:43:21.16147Z"}],"nvd":[{"id":"CVE-2016-0314","description":"The Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 allow remote authenticated users to conduct clickjacking attacks via unspecified vectors.","status":"published","published":"2016-07-08T01:59:06.35Z","modified":"2026-06-17T00:37:19.117Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:03:27.736698Z"}]}}