CVE-2019-4623

IBM Cognos Analytics 11.0 and 11.1 are vulnerable to cross-site scripting in the Web UI, potentially allowing arbitrary JavaScript and credential disclosure in a trusted session. The issue is documented as CVE-2019-4623 with a MEDIUM impact (CVSS v3.1 base score 5.4). Remediation per IBM’s bullet...