CVE-2025-27550

LOW

IBM Jazz Reporting Service - Info Disclosure

Title source: llm
STIX 2.1

Description

IBM Jazz Reporting Service could allow an authenticated user on the host network to obtain sensitive information about other projects that reside on the server.

References (1)

Scores

CVSS v3 3.5
EPSS 0.0001
EPSS Percentile 1.1%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-497
Status published
Products (2)
ibm/jazz_reporting_service 7.0.3 (21 CPE variants)
ibm/jazz_reporting_service 7.1 (7 CPE variants)
Published Feb 04, 2026
Tracked Since Feb 18, 2026