Cognos Business Intelligence Security Vulnerabilities and Issues — Cognos Business Intelligence CVE List

Lucene search

IbmCognos Business Intelligence

5 matches found

CVE•added 2013/03/05 5:2 a.m.•43 views

CVE-2012-4836

Cross-site scripting (XSS) vulnerability in IBM Cognos Business Intelligence (BI) 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted string that is not properly handled during rendering of ...

3.5CVSS5.1AI score0.00188EPSS

CVE•added 2014/02/22 9:55 p.m.•42 views

CVE-2014-0861

Cross-site scripting (XSS) vulnerability in the server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1 before IF6, 10.1.1 before IF5, 10.2 before IF7, 10.2.1 before IF4, and 10.2.1.1 before IF4 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter that is ...

3.5CVSS7.4AI score0.00166EPSS

CVE•added 2017/06/07 5:29 p.m.•40 views

CVE-2017-1125

IBM Cognos Analytics 10.1 and 10.2 could allow a local user to craft a URL which could confirm the existence of and expose postial contents of a file. IBM X-Force ID: 121340.

3.3CVSS5.4AI score0.00054EPSS

CVE•added 2013/08/27 3:34 a.m.•39 views

CVE-2013-0586

Cross-site scripting (XSS) vulnerability in the server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1, 10.1.1, 10.2, and 10.2.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

3.5CVSS5.2AI score0.00201EPSS

CVE•added 2014/12/12 11:59 a.m.•34 views

CVE-2014-6145

Cross-site scripting (XSS) vulnerability in the server in IBM Cognos Business Intelligence 10.1 before IF10, 10.1.1 before IF9, 10.2 before IF11, 10.2.1 before IF8, and 10.2.1.1 before IF7 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

3.5CVSS4.3AI score0.00166EPSS