Skip to content
Sign in
Not rated

CVE-2016-3038 IBM Cognos TM1 10.1 and 10.2 is vulnerable to cross-site scripting

Description

IBM Cognos TM1 10.1 and 10.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 114614.

Affected products and versions

Product Affected versions Fixed in
Cognos TM1 10.2 10.2 → 10.2.2 No fix stated
Cognos TM1 10.1 10.1 → 10.1.1.2 No fix stated

Other CVEs of Cognos TM1

The 3 CVEs of Cognos TM1 →
CVE-2016-3036 IBM Cognos TM1 10.1 and 10.2 is vulnerable to a denial of service, caused by a stack-based buffer overflow when… Not rated CVE-2016-3037 IBM Cognos TM1 10.1 and 10.2 provides a service to return the victim's password with a valid session key Not rated
Track this CVE