ibm cognos business intelligence 10.2.2 vulnerabilities and exploits

(subscribe to this query)

4.3

CVSSv2

IBM Cognos Business Intelligence 10.2, 10.2.1, 10.2.1.1, and 10.2.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure withi...

Ibm Cognos Business Intelligence 10.2.2 Ibm Cognos Business Intelligence 10.2 Ibm Cognos Business Intelligence 10.2.1 Ibm Cognos Business Intelligence 10.2.1.1

6.5

CVSSv2

IBM Cognos Business Intelligence 10.2 could allow a user with lower privilege Capabilities to adopt the Capabilities of a higher-privilege user by intercepting the higher-privilege user's cookie value from its HTTP request and then reusing it in subsequent requests. IBM Refe...

Ibm Cognos Business Intelligence 10.2 Ibm Cognos Business Intelligence 10.2.1.1 Ibm Cognos Business Intelligence 10.2.2 Ibm Cognos Business Intelligence 10.2.1

1.9

CVSSv2

IBM Cognos Business Intelligence 10.2, 10.2.1, 10.2.1.1, and 10.2.2, under specialized circumstances, could expose plain text credentials to a local user. IBM X-Force ID: 136149.

Ibm Cognos Business Intelligence 10.2.1 Ibm Cognos Business Intelligence 10.2.1.1 Ibm Cognos Business Intelligence 10.2.2 Ibm Cognos Business Intelligence 10.2

5

CVSSv2

IBM Cognos TM1 10.1 and 10.2 is vulnerable to a denial of service, caused by a stack-based buffer overflow when parsing packets. A remote attacker could exploit this vulnerability to cause a denial of service. IBM X-Force ID: 114612.

Ibm Cognos Business Intelligence 10.2 Ibm Cognos Business Intelligence 10.2.2 Ibm Cognos Business Intelligence 10.1

3.5

CVSSv2

IBM Cognos TM1 10.1 and 10.2 provides a service to return the victim's password with a valid session key. An authenticated attacker with user interaction could obtain this sensitive information. IBM X-Force ID: 114613.

Ibm Cognos Business Intelligence 10.2 Ibm Cognos Business Intelligence 10.1 Ibm Cognos Business Intelligence 10.2.2

3.5

CVSSv2

IBM Cognos TM1 10.1 and 10.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 11...

Ibm Cognos Business Intelligence 10.2 Ibm Cognos Business Intelligence 10.2.2 Ibm Cognos Business Intelligence 10.1

3.5

CVSSv2

Cross-site scripting (XSS) vulnerability in IBM Cognos TM1, as used in IBM Cognos Business Intelligence 10.2 before IF20, 10.2.1 before IF17, 10.2.1.1 before IF16, 10.2.2 before IF12, and 10.1.1 before IF19, allows remote authenticated users to inject arbitrary web script or HTML...

Ibm Cognos Business Intelligence 10.2.1.1 Ibm Cognos Business Intelligence 10.2.1 Ibm Cognos Business Intelligence 10.2 Ibm Cognos Business Intelligence 10.1.1 Ibm Cognos Business Intelligence 10.2.2

6.8

CVSSv2

IBM Cognos Business Intelligence 10.1 and 10.2 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote authenticated attacker could exploit this vulnerability to consume all available CPU resources and cause ...

Ibm Cognos Business Intelligence 10.2.1 Ibm Cognos Business Intelligence 10.2.2 Ibm Cognos Business Intelligence 10.1.1 Ibm Cognos Business Intelligence 10.2 Ibm Cognos Business Intelligence 10.2.1.1

3.5

CVSSv2

Cross-site scripting (XSS) vulnerability in IBM Cognos Business Intelligence 10.2 before IF20, 10.2.1 before IF17, 10.2.1.1 before IF16, 10.2.2 before IF12, and 10.1.1 before IF19 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

Ibm Cognos Business Intelligence 10.2 Ibm Cognos Business Intelligence 10.1.1 Ibm Cognos Business Intelligence 10.2.2 Ibm Cognos Business Intelligence 10.2.1.1 Ibm Cognos Business Intelligence 10.2.1

3.5

CVSSv2

IBM Cognos Business Intelligence and IBM Cognos Analytics are vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's Web browse...

Ibm Cognos Business Intelligence 10.1.1 Ibm Cognos Business Intelligence 10.2.1.1 Ibm Cognos Business Intelligence 10.2.2 Ibm Cognos Business Intelligence 10.2 Ibm Cognos Business Intelligence 10.2.1

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook