CVE-2021-39081: Cleartext Transmission of Sensitive Information

IBM Cognos Analytics Mobile for Android 1.1.14 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

IBM Cognos Analytics has an unspecified vulnerability (CNVD-2022-11191)

IBM Cognos Analytics is a suite of business intelligence software from IBM Corporation. The software includes reports, dashboards and scorecards, and can help companies adjust their decisions by analyzing key factors and key people, etc. A security vulnerability exists in IBM Cognos Analytics...

PT-2022-10879

Name of the Vulnerable Software and Affected Versions IBM Cognos Analytics Mobile for Android versions prior to 1.1.14 Description The issue is due to weak obfuscation in the IBM Cognos Analytics Mobile for Android application. This weakness allows an attacker to reverse engineer the codebase,...

PT-2022-10878

Name of the Vulnerable Software and Affected Versions IBM Cognos Analytics Mobile for Android versions prior to 1.1.14 Description This issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within...

CVE-2021-39080: Undefined Security Weakness

Due to weak obfuscation, IBM Cognos Analytics Mobile for Android application prior to version 1.1.14 , an attacker could be able to reverse engineer the codebase to gain knowledge about the programming technique, interface, class definitions, algorithms and functions used. IBM X-Force ID: 215593...

CVE-2021-39079: Improper Neutralization of Input During Web Page Generation

IBM Cognos Analytics Mobile for Android applications prior to version 1.1.14 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...

JVN#78745667: Multiples security updates for multiple Cybozu products

Cybozu, Inc. has released multiple security updates for multiple Cybozu products. CyVDB-2465 Credential Disclosure Vulnerability - CVE-2020-5572 CyVDB-2484 Credential Disclosure Vulnerability - CVE-2020-5573 Impact A user who can login to the product may obtain sensitive information registered in...

CVE-2020-5573: Exposure of Sensitive Information to an Unauthorized Actor

Android App 'kintone mobile for Android' 1.0.0 to 2.5 allows an attacker to obtain credential information registered in the product via unspecified vectors...

PT-2020-18548

Name of the Vulnerable Software and Affected Versions kintone mobile for Android versions 1.0.0 through 2.5 Description The issue allows an attacker to obtain credential information registered in the product via unspecified vectors. Recommendations For versions 1.0.0 through 2.5, update to a...

PT-2019-11205

Name of the Vulnerable Software and Affected Versions: SAP Business Objects Mobile for Android versions prior to 6.3.5 Description: The issue allows an attacker to provide malicious input in the form of a SAP BI link, which can cause the application to crash and prevent legitimate users from...

CVE-2019-0240: Undefined Security Weakness

SAP Business Objects Mobile for Android before 6.3.5 application allows an attacker to provide malicious input in the form of a SAP BI link, preventing legitimate users from accessing the application by crashing it...

PT-2017-9367

Name of the Vulnerable Software and Affected Versions Cybozu kintone mobile for Android versions 1.0.6 and earlier Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as it does not verify X.509 certificates from SS...

CVE-2016-7816: Improper Certificate Validation

The Cybozu kintone mobile for Android 1.0.6 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2016-1186: Improper Certificate Validation

Kintone mobile for Android 1.0.0 through 1.0.5 does not verify SSL server certificates...

PT-2017-7933

Name of the Vulnerable Software and Affected Versions Kintone mobile for Android versions 1.0.0 through 1.0.5 Description The issue is related to the failure of verifying SSL server certificates. This could potentially allow for man-in-the-middle attacks. Recommendations For versions 1.0.0 throug...