Security Bulletin: IBM Cognos Analytics Mobile is affected by security vulnerabilties

Summary IBM Cognos Analytics Mobile is affected by security vulnerabilities. These have been addressed in IBM Cognos Analytics Mobile 1.1.14. Vulnerability Details CVEID:CVE-2021-39080 DESCRIPTION: Due to weak obfuscation, IBM Cognos Analytics Mobile for Android application prior to version 1.1.1...

CVE-2021-39079

Scope: IBM Cognos Analytics Mobile for Android (prior to 1.1.14). Vulnerability: Cross-site scripting (XSS) in the Web UI allows embedding arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. Root cause/Vector: XSS in the Android app’s Web UI component (pr...