CVE-2011-0486

CVE-2011-0486 describes a cross-site scripting (XSS) vulnerability in IBM Cognos 8 BI (IBM Cognos 8, version 8.4.1 prior to FP1) where an attacker can inject arbitrary script/HTML via the pathinfo parameter in cognos.cgi. The issue allows remote exploitation and is classified with a MEDIUM severi...

CVE-2011-0486

Cross-site scripting XSS vulnerability in cognos.cgi in IBM Cognos 8 Business Intelligence BI 8.4.1 before FP1 allows remote attackers to inject arbitrary web script or HTML via the pathinfo parameter...

SECURITY ADVISORY IBM Cognos 8 Business Intelligence 8.4.1

Affected software IBM Cognos 8 Business Intelligence 8.4.1 Prior versions may also be affected. "IBM Cognos 8 Business Intelligence delivers the complete range of BI capabilities: Reporting, Analysis, Dashboarding and Scorecards on a single, service-oriented architecture SOA. Author, share and...