Lucene search

K
IbmCognos Business Intelligence10.2.1

4 matches found

CVE
CVE
added 2014/02/22 9:55 p.m.45 views

CVE-2013-6732

Cross-site scripting (XSS) vulnerability in the server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1 before IF6, 10.1.1 before IF5, 10.2 before IF7, 10.2.1 before IF4, and 10.2.1.1 before IF4 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter.

4.3CVSS7.3AI score0.00236EPSS
CVE
CVE
added 2014/02/22 9:55 p.m.42 views

CVE-2014-0861

Cross-site scripting (XSS) vulnerability in the server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1 before IF6, 10.1.1 before IF5, 10.2 before IF7, 10.2.1 before IF4, and 10.2.1.1 before IF4 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter that is ...

3.5CVSS7.4AI score0.00166EPSS
CVE
CVE
added 2014/12/12 11:59 a.m.34 views

CVE-2014-6145

Cross-site scripting (XSS) vulnerability in the server in IBM Cognos Business Intelligence 10.1 before IF10, 10.1.1 before IF9, 10.2 before IF11, 10.2.1 before IF8, and 10.2.1.1 before IF7 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

3.5CVSS4.3AI score0.00166EPSS
CVE
CVE
added 2014/02/22 9:55 p.m.30 views

CVE-2014-0854

The server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1 before IF6, 10.1.1 before IF5, 10.2 before IF7, 10.2.1 before IF4, and 10.2.1.1 before IF4 allows remote authenticated users to read arbitrary files via an XML document containing an external entity declaration in conjunction with an e...

5CVSS8.6AI score0.00217EPSS