CVE-2012-4858

2013-03-0505:02:00

CWE-20

[email protected]

web.nvd.nist.gov

ibm cognos

business intelligence

cve-2012-4858

security vulnerability

remote execution

7.7 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.006 Low

EPSS

Percentile

79.2%

JSON

IBM Cognos Business Intelligence (BI) 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 does not properly validate Java serialized input, which allows remote attackers to execute arbitrary commands via unspecified vectors.

CPENameOperatorVersion
ibm:cognos_business_intelligenceibm cognos business intelligenceeq10.2
ibm:cognos_business_intelligenceibm cognos business intelligenceeq10.1.1
ibm:cognos_business_intelligenceibm cognos business intelligenceeq10.1
ibm:cognos_business_intelligenceibm cognos business intelligenceeq8.4.1

CPE	Name	Operator	Version
ibm:cognos_business_intelligence	ibm cognos business intelligence	eq	10.2
ibm:cognos_business_intelligence	ibm cognos business intelligence	eq	10.1.1
ibm:cognos_business_intelligence	ibm cognos business intelligence	eq	10.1
ibm:cognos_business_intelligence	ibm cognos business intelligence	eq	8.4.1