Ibm

Cognos Business Intelligence

29 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2016-0346

  • EPSS 0.2%
  • Published 03.07.2016 21:59:01
  • Last modified 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in IBM Cognos Business Intelligence 10.2 before IF20, 10.2.1 before IF17, 10.2.1.1 before IF16, 10.2.2 before IF12, and 10.1.1 before IF19 allows remote authenticated users to inject arbitrary web script or HT...

5.4

CVE-2016-0221

  • EPSS 0.2%
  • Published 03.07.2016 21:59:00
  • Last modified 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in IBM Cognos TM1, as used in IBM Cognos Business Intelligence 10.2 before IF20, 10.2.1 before IF17, 10.2.1.1 before IF16, 10.2.2 before IF12, and 10.1.1 before IF19, allows remote authenticated users to injec...

3.5

CVE-2014-6145

  • EPSS 0.17%
  • Published 12.12.2014 11:59:02
  • Last modified 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in the server in IBM Cognos Business Intelligence 10.1 before IF10, 10.1.1 before IF9, 10.2 before IF11, 10.2.1 before IF8, and 10.2.1.1 before IF7 allows remote authenticated users to inject arbitrary web scr...

5

CVE-2014-0854

  • EPSS 0.22%
  • Published 22.02.2014 21:55:09
  • Last modified 11.04.2025 00:51:21

The server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1 before IF6, 10.1.1 before IF5, 10.2 before IF7, 10.2.1 before IF4, and 10.2.1.1 before IF4 allows remote authenticated users to read arbitrary files via an XML document containing an ext...

3.5

CVE-2014-0861

  • EPSS 0.17%
  • Published 22.02.2014 21:55:09
  • Last modified 11.04.2025 00:51:21

Cross-site scripting (XSS) vulnerability in the server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1 before IF6, 10.1.1 before IF5, 10.2 before IF7, 10.2.1 before IF4, and 10.2.1.1 before IF4 allows remote attackers to inject arbitrary web scr...

4.3

CVE-2013-6732

  • EPSS 0.24%
  • Published 22.02.2014 21:55:04
  • Last modified 11.04.2025 00:51:21

Cross-site scripting (XSS) vulnerability in the server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1 before IF6, 10.1.1 before IF5, 10.2 before IF7, 10.2.1 before IF4, and 10.2.1.1 before IF4 allows remote attackers to inject arbitrary web scr...

4

CVE-2013-4034

  • EPSS 5.43%
  • Published 18.11.2013 03:55:05
  • Last modified 11.04.2025 00:51:21

IBM Cognos Business Intelligence 8.4.1 before IF3, 10.1.0 before IF4, 10.1.1 before IF4, 10.2.0 before IF4, 10.2.1 before IF2, and 10.2.1.1 before IF1 allows remote authenticated users to read arbitrary files via an XML external entity declaration in...

5

CVE-2013-3030

  • EPSS 1.21%
  • Published 18.11.2013 03:55:05
  • Last modified 11.04.2025 00:51:21

The servlet gateway in IBM Cognos Business Intelligence 8.4.1 before IF3, 10.1.0 before IF4, 10.1.1 before IF4, 10.2.0 before IF4, 10.2.1 before IF2, and 10.2.1.1 before IF1 allows remote attackers to cause a denial of service (temporary gateway outa...

2.6

CVE-2013-2988

  • EPSS 0.19%
  • Published 27.08.2013 03:34:35
  • Last modified 11.04.2025 00:51:21

Absolute path traversal vulnerability in the server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1, 10.1.1, 10.2, and 10.2.1 allows remote authenticated users to read files by leveraging the Report Author privilege, a different vulnerability th...

2.1

CVE-2013-2978

  • EPSS 0.14%
  • Published 27.08.2013 03:34:35
  • Last modified 11.04.2025 00:51:21

Absolute path traversal vulnerability in the server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1, 10.1.1, 10.2, and 10.2.1 allows remote authenticated users to read files by leveraging the Report Author privilege, a different vulnerability th...