CVE-2015-7465: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Lifecycle Query Engine LQE in IBM Jazz Reporting Service JRS 6.0 before 6.0.0-Rational-CLM-ifix005 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences...

CVE-2015-7465

Cross-site request forgery CSRF vulnerability in Lifecycle Query Engine LQE in IBM Jazz Reporting Service JRS 6.0 before 6.0.0-Rational-CLM-ifix005 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences. Recent assessments: Assesse...

PT-2016-3788

Name of the Vulnerable Software and Affected Versions IBM Jazz Reporting Service JRS version 6.0 before 6.0.0-Rational-CLM-ifix005 Description A cross-site request forgery CSRF issue in the Lifecycle Query Engine LQE of IBM Jazz Reporting Service JRS allows remote authenticated users to hijack th...

PT-2016-3789

Name of the Vulnerable Software and Affected Versions IBM Jazz Reporting Service JRS version 6.0 before 6.0.0-Rational-CLM-ifix005 Description The issue allows remote authenticated users to conduct LDAP injection attacks. This can lead to bypassing intended query restrictions or modifying the LDA...

CVE-2015-7466: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Lifecycle Query Engine LQE in IBM Jazz Reporting Service JRS 6.0 before 6.0.0-Rational-CLM-ifix005 allows remote authenticated users to conduct LDAP injection attacks, and consequently bypass intended query restrictions or modify the LDAP directory, via unspecified vectors...

OpenMRS Reporting Module 0.9.7 - Remote Code Execution

Title: Unauthenticated remote code execution in OpenMRS Product: OpenMRS Vendor: OpenMRS Inc. Tested versions: See summary Status: Fixed by vendor Reported by: Brian D. Hysell Product description: OpenMRS is "the world's leading open source enterprise electronic medical record system platform."...

IBM Cognos Business Intelligence Tivoli Common Reporting Security Bypass Vulnerability

IBM Cognos Business Intelligence BI and IBM Tivoli Common Reporting TCR are both products of IBM Corporation, U.S.A. BI is a set of business intelligence software. The software includes reports, dashboards, and scorecards, and can assist companies in adjusting their decisions by analyzing such...

IBM Cognos Business Intelligence Tivoli Common Reporting Elevation of Privilege Vulnerability

IBM Cognos Business Intelligence BI and IBM Tivoli Common Reporting TCR are both products of IBM Corporation, U.S.A. BI is a set of business intelligence software. The software includes reports, dashboards, and scorecards, and can assist companies in adjusting their decisions by analyzing such...

CVE-2015-7436

IBM Tivoli Common Reporting TCR 2.1 before IF14, 2.1.1 before IF22, 2.1.1.2 before IF9, 3.1.0.0 through 3.1.2 as used in Cognos Business Intelligence before 10.2 IF16, and 3.1.2.1 as used in Cognos Business Intelligence before 10.2.1.1 IF12 preserves user permissions across group-add and...

CVE-2015-7435

IBM Tivoli Common Reporting TCR 2.1 before IF14, 2.1.1 before IF22, 2.1.1.2 before IF9, 3.1.0.0 through 3.1.2 as used in Cognos Business Intelligence before 10.2 IF16, and 3.1.2.1 as used in Cognos Business Intelligence before 10.2.1.1 IF12 allows local users to bypass the Cognos Application...

Design/Logic Flaw

IBM Tivoli Common Reporting TCR 2.1 before IF14, 2.1.1 before IF22, 2.1.1.2 before IF9, 3.1.0.0 through 3.1.2 as used in Cognos Business Intelligence before 10.2 IF16, and 3.1.2.1 as used in Cognos Business Intelligence before 10.2.1.1 IF12 preserves user permissions across group-add and...

Design/Logic Flaw

IBM Tivoli Common Reporting TCR 2.1 before IF14, 2.1.1 before IF22, 2.1.1.2 before IF9, 3.1.0.0 through 3.1.2 as used in Cognos Business Intelligence before 10.2 IF16, and 3.1.2.1 as used in Cognos Business Intelligence before 10.2.1.1 IF12 allows local users to bypass the Cognos Application...

CVE-2015-7435

IBM Tivoli Common Reporting TCR 2.1 before IF14, 2.1.1 before IF22, 2.1.1.2 before IF9, 3.1.0.0 through 3.1.2 as used in Cognos Business Intelligence before 10.2 IF16, and 3.1.2.1 as used in Cognos Business Intelligence before 10.2.1.1 IF12 allows local users to bypass the Cognos Application...

CVE-2015-7436

CVE-2015-7436 affects IBM Tivoli Common Reporting (TCR) as used in Cognos Business Intelligence; the vulnerability arises from adding/removing users to/from an external (namespace) group in TCR, which may preserve user permissions across group membership changes and allow a local attacker with ad...

CVE-2015-7436

IBM Tivoli Common Reporting TCR 2.1 before IF14, 2.1.1 before IF22, 2.1.1.2 before IF9, 3.1.0.0 through 3.1.2 as used in Cognos Business Intelligence before 10.2 IF16, and 3.1.2.1 as used in Cognos Business Intelligence before 10.2.1.1 IF12 preserves user permissions across group-add and...

PT-2016-1113 · Ibm +1 · Ibm Tivoli Common Reporting +7

Name of the Vulnerable Software and Affected Versions: IBM WebSphere Application Server versions affected versions not specified IBM Tivoli Common Reporting versions affected versions not specified IBM Sterling B2B Integrator versions affected versions not specified IBM Sterling Integrator versio...

PT-2016-3776

Name of the Vulnerable Software and Affected Versions IBM Tivoli Common Reporting TCR versions 2.1 through 2.1 before IF14 IBM Tivoli Common Reporting TCR versions 2.1.1 through 2.1.1 before IF22 IBM Tivoli Common Reporting TCR versions 2.1.1.2 through 2.1.1.2 before IF9 IBM Tivoli Common Reporti...

PT-2016-3775

Name of the Vulnerable Software and Affected Versions IBM Tivoli Common Reporting TCR versions 2.1 through 2.1 before IF14 IBM Tivoli Common Reporting TCR versions 2.1.1 through 2.1.1 before IF22 IBM Tivoli Common Reporting TCR versions 2.1.1.2 through 2.1.1.2 before IF9 IBM Tivoli Common Reporti...

CVE-2015-7435: Undefined Security Weakness

IBM Tivoli Common Reporting TCR 2.1 before IF14, 2.1.1 before IF22, 2.1.1.2 before IF9, 3.1.0.0 through 3.1.2 as used in Cognos Business Intelligence before 10.2 IF16, and 3.1.2.1 as used in Cognos Business Intelligence before 10.2.1.1 IF12 allows local users to bypass the Cognos Application...

CVE-2015-7436: Undefined Security Weakness

IBM Tivoli Common Reporting TCR 2.1 before IF14, 2.1.1 before IF22, 2.1.1.2 before IF9, 3.1.0.0 through 3.1.2 as used in Cognos Business Intelligence before 10.2 IF16, and 3.1.2.1 as used in Cognos Business Intelligence before 10.2.1.1 IF12 preserves user permissions across group-add and...