CVE-2016-6077

IBM Cognos Disclosure Management 10.2 (affected: 10.2.0–10.2.6) contains CVE-2016-6077, where a crafted Macro in an exported CSV could cause Excel Macro execution on the client and potentially execute commands as a lower privileged user. Remediation: apply Cognos Disclosure Management 10.2.5 Inte...

CVE-2015-5014

IBM Cognos Disclosure Management (CDM) 10.1.x and 10.2.x before 10.2.4 IF10 are affected by a vulnerability that allows man-in-the-middle attackers to gain access by spoofing an executable file during a client upload. Root cause appears tied to input validation in CDM prior to 10.2.4 IF10. No exp...

CVE-2013-0501

The CVE-2013-0501 entry involves the EdrawSoft EDOFFICE.EDOfficeCtrl.1 ActiveX control (used by Edraw Office Viewer Component and IBM Cognos Disclosure Management 10.2.0). The vulnerability arises from this ActiveX control permitting a crafted web site to read arbitrary files on a client, or down...