CVE-2022-38708

CVE-2022-38708 – IBM Cognos Analytics SSRF vulnerability in IBM Cognos Analytics versions 11.1.7, 11.2.0, and 11.2.1. The issue allows an attacker to construct URLs from user-controlled data, enabling server-side requests to internal networks or the local file system. Impact and exploit details a...

CVE-2021-38708

creationtimestamp| type| source ---|---|--- 2021-08-16 07:14:18+00:00| seen| https://t.me/cibsecurity/27350...

CVE-2021-38708

In ocProducts Composr CMS before 10.0.38, an attacker can inject JavaScript via Comcode for XSS...

CVE-2021-38708

CVE-2021-38708 affects ocProducts Composr CMS prior to 10.0.38. An attacker can trigger a JavaScript injection via Comcode, resulting in a cross-site scripting (XSS) vulnerability. The root cause is improper handling of Comcode input allowing injected script. Documents consistently describe this ...