Security Bulletin: IBM Cognos Analytics Mobile is affected by security vulnerabilties

Summary IBM Cognos Analytics Mobile is affected by security vulnerabilities. These have been addressed in IBM Cognos Analytics Mobile 1.1.14. Vulnerability Details CVEID:CVE-2021-39080 DESCRIPTION: Due to weak obfuscation, IBM Cognos Analytics Mobile for Android application prior to version 1.1.1...

CVE-2021-39079

Scope: IBM Cognos Analytics Mobile for Android (prior to 1.1.14). Vulnerability: Cross-site scripting (XSS) in the Web UI allows embedding arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. Root cause/Vector: XSS in the Android app’s Web UI component (pr...

CVE-2021-39079

IBM Cognos Analytics Mobile for Android applications prior to version 1.1.14 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...