EUVD-2012-6205

Malware in sbrugna...

EUVD-2014-0907

Malware in sbrugna...

EUVD-2016-0416

Malware in sbrugna...

EUVD-2016-4110

Malware in sbrugna...

EUVD-2012-1084

Malware in sbrugna...

EUVD-2017-10522

Malware in sbrugna...

EUVD-2016-4109

Malware in sbrugna...

CVE-2012-1046

Cross-site scripting XSS vulnerability in TM1 Web in IBM Cognos TM1 9.5.2 FP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2012-0696...

IBM Cognos TM1 / IBM Planning Analytics Server Configuration Overwrite / Code Execution Exploit

IBM Cognos TM1 Server / Planning Analytics Server TM1 suffers from a configuration overwrite vulnerability that can be leveraged to achieve code execution as SYSTEM via TM1 scripting. Extensive research is included in this advisory as well as the Metasploit module. IBM PA / TM1, dating back to...

Security Bulletin: A vulnerability in IBM Java Runtime affects IBM Cognos TM1

Summary There is a vulnerability in IBM® Runtime Environment Java™ Version 7 used by IBM Cognos TM1. This issue was disclosed as part of the IBM Java SDK updates in October 2017. Vulnerability Details CVEID: CVE-2017-10356 DESCRIPTION: An unspecified vulnerability related to the Java SE Security...

Security Bulletin: Multiple Security Vulnerabilities exist in IBM Cognos TM1

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 7. These issues were disclosed as part of the IBM Java SDK updates in October 2016 and January 2017. Multiple Open Source OpenSSL vulnerabilities have also been addressed. Vulnerability Details CVEID: CVE-2016-21...

Security Bulletin: Multiple Security Vulnerabilities exist in IBM Cognos TM1

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 7 used by IBM Cognos TM1. These issues were disclosed as part of the IBM Java SDK updates in January 2018 and April 2018. Multiple Open Source OpenSSL vulnerabilities have also been addressed. Vulnerability Detai...

Security Bulletin: Multiple Security Vulnerabilities exist in IBM Cognos TM1

Summary Several vulnerabilities have been addressed for: IBM SDK, Java Technology Edition Quarterly CPU - Jul 2016; Recover Password with Valid Session Key; System Name Stored Cross-site Scripting; TM1 Server Stack Exhaustion Denial of Service; OpenSource OpenSSL; Sweet32: Birthday attacks on...

Security Bulletin: Multiple Security Vulnerabilities exist in IBM Cognos TM1

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 7 used by IBM Cognos TM1. These issues were disclosed as part of the IBM Java SDK updates in April 2017 and July 2017. A XSS vulnerability in Performance Management Hub was also addressed. Vulnerability Details...

Security Bulletin: Multiple Security Vulnerabilities exist in IBM Cognos TM1

Summary Several vulnerabilities have been addressed for: IBM SDK, Java Technology Edition Quarterly CPU - Apr 2016; OpenSource OpenSSL; and Opensource Apache Tomcat Vulnerabilities Vulnerability Details CVEID: CVE-2016-3427 DESCRIPTION: An unspecified vulnerability in Oracle Java, SE Java SE...

Security Bulletin: Multiple Security Vulnerabilities exist in IBM Cognos TM1

Summary Several vulnerabilities have been addressed for: IBM SDK Java Technology Edition Quarterly CPU Oct 2015, including Oracle Oct 2015 CPU; IBM SDK Java Technology Edition Quarterly CPU Jan 2016, including Oracle Jan 2016 CPU; Java specific SLOTH Weak MD5 Signature Hash; and several OpenSSL...

IBM Cognos TM1 Arbitrary Code Execution Vulnerability

IBM Cognos TM1 is a suite of enterprise planning software for planning, budgeting, forecasting and analyzing from IBM in the United States. The software quickly analyzes data, models business needs, and collaborates on plans, budgets, and forecasts. An arbitrary code execution vulnerability exist...

Security Bulletin: IBM Cognos TM1 is affected by multiple vulnerabilities (CVE-2018-15494, CVE-2019-4245)

Summary Dojo Toolkit, used by IBM Cognos TM1, is vulnerable to cross-site scripting XSS . This issue has been addressed. A vulnerability exists where TM1 Server could allow a local user with specialized access to exploit an unquoted Windows search path vulnerability which could allow local users ...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Cognos TM1 (CVE-2018-3180, CVE-2018-12547)

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 7 used by IBM Cognos TM1. These issues were disclosed as part of the IBM Java SDK updates in October 2018 and January 2019. Vulnerability Details If you run your own Java code using the IBM Java Runtime delivered...

Security Bulletin: Multiple Security Vulnerabilities exist in IBM Cognos TM1 (CVE-2018-1656, CVE-2018-0732, CVE-2018-12539)

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 7 used by IBM Cognos TM1. These issues were disclosed as part of the IBM Java SDK updates in July 2018. An Open Source OpenSSL vulnerabilitiy has also been addressed. Vulnerability Details If you run your own Jav...