Cross site scripting

IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 161421...

Security Bulletin: IBM Cognos Analytics : IBM Cognos Analytics is affected by CVE-2016-0398

Summary This bulletin addresses a recently discovered content spoofing vulnerability. Vulnerability Details CVEID: CVE-2016-0398 DESCRIPTION: IBM Cognos Analytics is vulnerable to content spoofing when an attacker familiar with CA can convince a user to click on a malicious link. CVSS Base Score:...

CVE-2016-9711: Exposure of Sensitive Information to an Unauthorized Actor

IBM Predictive Solutions Foundation IBM Cognos Analytics 11.0 reveals sensitive information in detailed error messages that could aid an attacker in further attacks against the system. IBM X-Force ID: 119619...