CVE-2012-4840

IBM Cognos Business Intelligence BI 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 allows remote attackers to conduct XPath injection attacks, and call XPath extension functions, via unspecified vectors...

CVE-2012-4836

IBM Cognos BI CVE-2012-4836 describes a stored XSS vulnerability in IBM Cognos BI 8.4.1 (before IF1), 10.1 (before IF2), 10.1.1 (before IF2), and 10.2 (before IF1), where remote authenticated users can inject arbitrary web script or HTML via crafted input that is not properly sanitized during ren...

CVE-2012-4858

The CVE-2012-4858 issue affects IBM Cognos Business Intelligence (BI) 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1, where Java serialized input is not properly validated. This allows a remote attacker to execute arbitrary commands via unspecified vectors. The connecte...

CVE-2012-4835

IBM Cognos BI is affected by CVE-2012-4835: a reflected cross-site scripting vulnerability in IBM Cognos BI versions 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 that allows remote attackers to inject arbitrary script via unspecified vectors. The vulnerability is disc...

Old School Hackers spying on European governments

Kaspersky Lab's team of experts recently published a new research report that analyzed that Cyber criminals have targeted government officials in more than 20 countries, including Ireland and Romania with a new piece of malware called 'MiniDuke'. In a recent attack, malware has infected governmen...

PT-2013-1544

Name of the Vulnerable Software and Affected Versions IBM Cognos Business Intelligence BI versions 8.4.1 before IF1 IBM Cognos Business Intelligence BI versions 10.1 before IF2 IBM Cognos Business Intelligence BI versions 10.1.1 before IF2 IBM Cognos Business Intelligence BI versions 10.2 before...

PT-2013-1545

Name of the Vulnerable Software and Affected Versions IBM Cognos Business Intelligence BI versions 8.4.1 before IF1 IBM Cognos Business Intelligence BI versions 10.1 before IF2 IBM Cognos Business Intelligence BI versions 10.1.1 before IF2 IBM Cognos Business Intelligence BI versions 10.2 before...

PT-2013-1724

Name of the Vulnerable Software and Affected Versions IBM Cognos Business Intelligence BI versions 8.4.1 before IF1 IBM Cognos Business Intelligence BI versions 10.1 before IF2 IBM Cognos Business Intelligence BI versions 10.1.1 before IF2 IBM Cognos Business Intelligence BI versions 10.2 before...

PT-2013-1726

Name of the Vulnerable Software and Affected Versions IBM Cognos Business Intelligence BI versions 8.4.1 through 8.4.1 before IF1 IBM Cognos Business Intelligence BI versions 10.1 through 10.1 before IF2 IBM Cognos Business Intelligence BI versions 10.1.1 through 10.1.1 before IF2 IBM Cognos...

PT-2013-1725

Name of the Vulnerable Software and Affected Versions IBM Cognos Business Intelligence BI versions 8.4.1 through 8.4.1 before IF1 IBM Cognos Business Intelligence BI versions 10.1 through 10.1 before IF2 IBM Cognos Business Intelligence BI versions 10.1.1 through 10.1.1 before IF2 IBM Cognos...

CVE-2012-2177: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Cognos Business Intelligence BI 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 allows user-assisted remote attackers to inject arbitrary web script or HTML via vectors related to the search feature...

CVE-2012-4840: Improper Control of Generation of Code

IBM Cognos Business Intelligence BI 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 allows remote attackers to conduct XPath injection attacks, and call XPath extension functions, via unspecified vectors...

CVE-2012-2193: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Query Studio in IBM Cognos Business Intelligence BI 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 allows user-assisted remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-4858: Improper Input Validation

IBM Cognos Business Intelligence BI 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 does not properly validate Java serialized input, which allows remote attackers to execute arbitrary commands via unspecified vectors...

CVE-2012-4836: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Cognos Business Intelligence BI 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted string that is not properly handled during rendering of...

CVE-2012-4837: Exposure of Sensitive Information to an Unauthorized Actor

IBM Cognos Business Intelligence BI 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 allows remote authenticated users to conduct XPath injection attacks, and read arbitrary XML files, via unspecified vectors...

CVE-2012-4835: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Cognos Business Intelligence BI 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2013-1727

Name of the Vulnerable Software and Affected Versions IBM Cognos Business Intelligence BI versions 8.4.1 through 8.4.1 before IF1 IBM Cognos Business Intelligence BI versions 10.1 through 10.1 before IF2 IBM Cognos Business Intelligence BI versions 10.1.1 through 10.1.1 before IF2 IBM Cognos...

PT-2013-1731

Name of the Vulnerable Software and Affected Versions IBM Cognos Business Intelligence BI versions 8.4.1 through 8.4.1 before IF1 IBM Cognos Business Intelligence BI versions 10.1 through 10.1 before IF2 IBM Cognos Business Intelligence BI versions 10.1.1 through 10.1.1 before IF2 IBM Cognos...

Latest Kelihos Botnet Shut Down Live at RSA Conference 2013

SAN FRANCISCO – Down goes Kelihos—again. The third version of the prolific peer-to-peer botnet responsible for volumes of pharmaceutical spam, Bitcoin wallet theft and credential harvesting was shut down before a live audience today at RSA Conference 2013. With the execution of a few commands tha...