IBM Jazz Reporting Service Authenticated Info Disclosure CVE-2025-27550
CVE-2025-27550 Published on February 4, 2026
IBM Jazz Reporting Service Information Disclosure
IBM Jazz Reporting Service could allow an authenticated user on the host network to obtain sensitive information about other projects that reside on the server.
Vulnerability Analysis
Weakness Type
Exposure of Sensitive System Information to an Unauthorized Control Sphere
The application does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the application does.
Products Associated with CVE-2025-27550
Want to know whenever a new CVE is published for IBM Jazz Reporting Service? stack.watch will email you.
Affected Versions
IBM Jazz Reporting Service:- Version 7.1, <= 7.1iFix006 is affected.
- Version 7.0.3, <= 7.0.3iFix020 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.