IBM Cognos Analytics (CA) 11.0 prior to 11.0.2 allows remote malicious users to conduct content-spoofing attacks via a crafted URL.
ibm cognos analytics 11.0.0