EUVD-2016-7011

Malware in sbrugna...

CVE-2016-6077: Improper Access Control

IBM Cognos Disclosure Management 10.2 could allow a malicious attacker to execute commands as a lower privileged user that opens a malicious document. IBM Reference : 1991584...

PT-2017-8880

Name of the Vulnerable Software and Affected Versions IBM Cognos Disclosure Management version 10.2 Description The issue allows a malicious attacker to execute commands as a lower privileged user when a malicious document is opened. Recommendations For IBM Cognos Disclosure Management version...

CVE-2015-5014: Improper Input Validation

IBM Cognos Disclosure Management CDM 10.1.x and 10.2.x before 10.2.4 IF10 allows man-in-the-middle attackers to obtain access by spoofing an executable file during a client upload operation...

PT-2015-6752

Name of the Vulnerable Software and Affected Versions IBM Cognos Disclosure Management CDM versions 10.1.x through 10.2.x before 10.2.4 IF10 Description The issue allows man-in-the-middle attackers to obtain access by spoofing an executable file during a client upload operation. Recommendations F...

Design/Logic Flaw

The EdrawSoft EDOFFICE.EDOfficeCtrl.1 ActiveX control, as used in Edraw Office Viewer Component, the client in IBM Cognos Disclosure Management CDM 10.2.0, and other products, allows remote attackers to read arbitrary files, or download an arbitrary program onto a client machine and execute this...

CVE-2013-0501

The EdrawSoft EDOFFICE.EDOfficeCtrl.1 ActiveX control, as used in Edraw Office Viewer Component, the client in IBM Cognos Disclosure Management CDM 10.2.0, and other products, allows remote attackers to read arbitrary files, or download an arbitrary program onto a client machine and execute this...

CVE-2013-0501

The CVE-2013-0501 entry involves the EdrawSoft EDOFFICE.EDOfficeCtrl.1 ActiveX control (used by Edraw Office Viewer Component and IBM Cognos Disclosure Management 10.2.0). The vulnerability arises from this ActiveX control permitting a crafted web site to read arbitrary files on a client, or down...

PT-2013-2387

Name of the Vulnerable Software and Affected Versions Edraw Office Viewer Component version not specified IBM Cognos Disclosure Management CDM version 10.2.0 Description The issue allows remote attackers to read arbitrary files or download and execute an arbitrary program onto a client machine vi...

CVE-2013-0501: Undefined Security Weakness

The EdrawSoft EDOFFICE.EDOfficeCtrl.1 ActiveX control, as used in Edraw Office Viewer Component, the client in IBM Cognos Disclosure Management CDM 10.2.0, and other products, allows remote attackers to read arbitrary files, or download an arbitrary program onto a client machine and execute this...