Lucene search

CVE-2022-39160

🗓️ 19 Dec 2022 21:10:15Reported by ibmType

IBM Cognos Analytics 11.2.1, 11.2.0, and 11.1.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI. IBM X-Force ID: 235064

Reporter	Title	Published	Views	Family All 6
Cvelist	CVE-2022-39160 IBM Cognos Analytics cross-site scripting	19 Dec 202220:57	–	cvelist
Prion	Cross site scripting	19 Dec 202221:15	–	prion
CNVD	IBM Cognos Analytics Cross-Site Scripting Vulnerability (CNVD-2022-91132)	21 Dec 202200:00	–	cnvd
NVD	CVE-2022-39160	19 Dec 202221:15	–	nvd
Tenable Nessus	IBM Cognos Analytics Multiple Vulnerabilities (6841801)	5 Jan 202300:00	–	nessus
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities (CVE-2021-29469, CVE-2022-39160, CVE-2022-38708, CVE-2022-42003, CVE-2022-42004, CVE-2022-43883, CVE-2022-43887, CVE-2022-25647, CVE-2022-36364)	10 Mar 202323:31	–	ibm

Nvd

Vulners

Node

ibm cognos_analyticsRange11.1.0–11.1.7

ibm cognos_analyticsRange11.2.0–11.2.3

ibm cognos_analyticsMatch11.1.7-

ibm cognos_analyticsMatch11.1.7fixpack1

ibm cognos_analyticsMatch11.1.7fixpack2

ibm cognos_analyticsMatch11.1.7fixpack3

ibm cognos_analyticsMatch11.1.7fixpack4

ibm cognos_analyticsMatch11.1.7fixpack5

[
  {
    "defaultStatus": "unaffected",
    "product": "Cognos Analytics",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "11.1.7, 11.2.0, 11.2.1"
      }
    ]
  }
]

Source	Link
ibm	www.ibm.com/support/pages/node/6841801
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/235064

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

19 Dec 2022 21:15Current

5.8Medium risk

Vulners AI Score5.8

CVSS36.1

EPSS0.00065

CWE-79