CVE-2017-1506

IBM Cognos TM1 10.2 and 10.2.2 are affected by a cross-site scripting (XSS) vulnerability in the Web UI that allows embedding arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. Affected products and versions are explicitly listed. The IBM security bullet...