CVE-2012-4836

Cross-site scripting XSS vulnerability in IBM Cognos Business Intelligence BI 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted string that is not properly handled during rendering of...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Cognos Business Intelligence BI 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted string that is not properly handled during rendering of...

Design/Logic Flaw

IBM Cognos Business Intelligence BI 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 allows remote authenticated users to conduct XPath injection attacks, and read arbitrary XML files, via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Query Studio in IBM Cognos Business Intelligence BI 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 allows user-assisted remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-4837

IBM Cognos BI is vulnerable to XPath injection (read arbitrary XML) for versions 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1. The issue arises from improper input validation prior to XPath query use and requires remote authenticated access. Remediation: apply Cognos ...

CVE-2012-2177

Cross-site scripting XSS vulnerability in IBM Cognos Business Intelligence BI 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 allows user-assisted remote attackers to inject arbitrary web script or HTML via vectors related to the search feature...

CVE-2012-2193

Cross-site scripting XSS vulnerability in Query Studio in IBM Cognos Business Intelligence BI 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 allows user-assisted remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-4858

IBM Cognos Business Intelligence BI 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 does not properly validate Java serialized input, which allows remote attackers to execute arbitrary commands via unspecified vectors...

CVE-2012-4858

The CVE-2012-4858 issue affects IBM Cognos Business Intelligence (BI) 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1, where Java serialized input is not properly validated. This allows a remote attacker to execute arbitrary commands via unspecified vectors. The connecte...

CVE-2012-4840

IBM Cognos BI is vulnerable to XPath injection (CVE-2012-4840). Affected versions: 8.4.1 prior to IF1, 10.1 prior to IF2, 10.1.1 prior to IF2, and 10.2 prior to IF1. Attackers can remotely inject XPath code and call XPath extension functions via unspecified vectors. Mitigation: apply Cognos BI In...

CVE-2012-2177

IBM Cognos BI (8.4.1 before IF1; 10.1 before IF2; 10.1.1 before IF2; 10.2 before IF1) is affected by a reflected cross-site scripting (XSS) vulnerability that can be triggered when an attacker entices a user to interact with search-related UI elements, executing arbitrary script in the victim’s b...

CVE-2012-2193

CVE-2012-2193 affects IBM Cognos BI versions 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1. The IBM advisory documents a reflected cross-site scripting flaw that requires additional user interaction. Remediation is via Cognos Interim Fixes for Security Exposure; mitiga...

PT-2013-1545

Name of the Vulnerable Software and Affected Versions IBM Cognos Business Intelligence BI versions 8.4.1 before IF1 IBM Cognos Business Intelligence BI versions 10.1 before IF2 IBM Cognos Business Intelligence BI versions 10.1.1 before IF2 IBM Cognos Business Intelligence BI versions 10.2 before...

CVE-2012-4858: Improper Input Validation

IBM Cognos Business Intelligence BI 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 does not properly validate Java serialized input, which allows remote attackers to execute arbitrary commands via unspecified vectors...

PT-2013-1726

Name of the Vulnerable Software and Affected Versions IBM Cognos Business Intelligence BI versions 8.4.1 through 8.4.1 before IF1 IBM Cognos Business Intelligence BI versions 10.1 through 10.1 before IF2 IBM Cognos Business Intelligence BI versions 10.1.1 through 10.1.1 before IF2 IBM Cognos...

CVE-2012-4840: Improper Control of Generation of Code

IBM Cognos Business Intelligence BI 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 allows remote attackers to conduct XPath injection attacks, and call XPath extension functions, via unspecified vectors...

Fedora Update for leptonica FEDORA-2013-1490

Check for the Version of leptonica OpenVAS Vulnerability Test Fedora Update for leptonica FEDORA-2013-1490 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

CVE-2012-4847

CVE-2012-4847 affects IBM Cognos BI 8.4 and 8.4.1. A remote authenticated user can cause high CPU usage via a crafted request containing a zero-valued byte, yielding a partial denial of service. According to IBM, exploitation requires authentication and it does not apply to Cognos BI 10.1 and lat...

CVE-2012-4847: Undefined Security Weakness

IBM Cognos Business Intelligence BI 8.4 and 8.4.1 allows remote authenticated users to cause a denial of service CPU consumption via a crafted request containing a zero-valued byte...

CVE-2012-3193

Unspecified vulnerability in the Oracle BI Publisher component in Oracle Fusion Middleware 10.3.4.2, 11.1.1.5.0, 11.1.1.6.0, and 11.1.1.6.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Administration...