CVE-2012-0696

Multiple cross-site scripting XSS vulnerabilities in the Executive Viewer EV in IBM Cognos TM1 before 9.5 FP1 allow remote attackers to inject arbitrary web script or HTML via unspecified requests to 1 aspnetclient or 2 evserver/createcontrol.js...

PT-2012-2800

Name of the Vulnerable Software and Affected Versions IBM Cognos TM1 versions prior to 9.5 FP1 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the Executive Viewer EV component. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML...

CVE-2012-0696: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Executive Viewer EV in IBM Cognos TM1 before 9.5 FP1 allow remote attackers to inject arbitrary web script or HTML via unspecified requests to 1 aspnetclient or 2 evserver/createcontrol.js...