Our e-security found the following error for the Reporting plugin:

Number System/Location Defect Type Status
R2 Reporting Plugin Client-side Attacks: Cross-site Scripting Open
Description
Security Risk: It is possible to steal or manipulate customer session and cookies, which may be used to impersonate a legitimate user, allowing the hacker to view or alter user records or gain access to other Single Sign On applications and perform transactions as that user. Refer to the url:

https://wikistg.seagate.com/confluence/display/IT/R01+Reporting+eSec+Plugin