Aller au contenu
Se connecter
Non notée

CVE-2016-3038 IBM Cognos TM1 10.1 and 10.2 is vulnerable to cross-site scripting

Description

IBM Cognos TM1 10.1 and 10.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 114614.

Produits et versions touchés

Produit Versions touchées Corrigé en
Cognos TM1 10.2 10.2 → 10.2.2 Pas de correctif indiqué
Cognos TM1 10.1 10.1 → 10.1.1.2 Pas de correctif indiqué

Autres CVE de Cognos TM1

Les 3 CVE de Cognos TM1 →
CVE-2016-3036 IBM Cognos TM1 10.1 and 10.2 is vulnerable to a denial of service, caused by a stack-based buffer overflow when… Non notée CVE-2016-3037 IBM Cognos TM1 10.1 and 10.2 provides a service to return the victim's password with a valid session key Non notée
Suivre cette CVE