Ibm

Cognos Business Intelligence

29 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2016-0346

  • EPSS 0.2%
  • Veröffentlicht 03.07.2016 21:59:01
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in IBM Cognos Business Intelligence 10.2 before IF20, 10.2.1 before IF17, 10.2.1.1 before IF16, 10.2.2 before IF12, and 10.1.1 before IF19 allows remote authenticated users to inject arbitrary web script or HT...

5.4

CVE-2016-0221

  • EPSS 0.2%
  • Veröffentlicht 03.07.2016 21:59:00
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in IBM Cognos TM1, as used in IBM Cognos Business Intelligence 10.2 before IF20, 10.2.1 before IF17, 10.2.1.1 before IF16, 10.2.2 before IF12, and 10.1.1 before IF19, allows remote authenticated users to injec...

3.5

CVE-2014-6145

  • EPSS 0.17%
  • Veröffentlicht 12.12.2014 11:59:02
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in the server in IBM Cognos Business Intelligence 10.1 before IF10, 10.1.1 before IF9, 10.2 before IF11, 10.2.1 before IF8, and 10.2.1.1 before IF7 allows remote authenticated users to inject arbitrary web scr...

5

CVE-2014-0854

  • EPSS 0.22%
  • Veröffentlicht 22.02.2014 21:55:09
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1 before IF6, 10.1.1 before IF5, 10.2 before IF7, 10.2.1 before IF4, and 10.2.1.1 before IF4 allows remote authenticated users to read arbitrary files via an XML document containing an ext...

3.5

CVE-2014-0861

  • EPSS 0.17%
  • Veröffentlicht 22.02.2014 21:55:09
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Cross-site scripting (XSS) vulnerability in the server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1 before IF6, 10.1.1 before IF5, 10.2 before IF7, 10.2.1 before IF4, and 10.2.1.1 before IF4 allows remote attackers to inject arbitrary web scr...

4.3

CVE-2013-6732

  • EPSS 0.24%
  • Veröffentlicht 22.02.2014 21:55:04
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Cross-site scripting (XSS) vulnerability in the server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1 before IF6, 10.1.1 before IF5, 10.2 before IF7, 10.2.1 before IF4, and 10.2.1.1 before IF4 allows remote attackers to inject arbitrary web scr...

4

CVE-2013-4034

  • EPSS 5.43%
  • Veröffentlicht 18.11.2013 03:55:05
  • Zuletzt bearbeitet 11.04.2025 00:51:21

IBM Cognos Business Intelligence 8.4.1 before IF3, 10.1.0 before IF4, 10.1.1 before IF4, 10.2.0 before IF4, 10.2.1 before IF2, and 10.2.1.1 before IF1 allows remote authenticated users to read arbitrary files via an XML external entity declaration in...

5

CVE-2013-3030

  • EPSS 1.21%
  • Veröffentlicht 18.11.2013 03:55:05
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The servlet gateway in IBM Cognos Business Intelligence 8.4.1 before IF3, 10.1.0 before IF4, 10.1.1 before IF4, 10.2.0 before IF4, 10.2.1 before IF2, and 10.2.1.1 before IF1 allows remote attackers to cause a denial of service (temporary gateway outa...

2.6

CVE-2013-2988

  • EPSS 0.19%
  • Veröffentlicht 27.08.2013 03:34:35
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Absolute path traversal vulnerability in the server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1, 10.1.1, 10.2, and 10.2.1 allows remote authenticated users to read files by leveraging the Report Author privilege, a different vulnerability th...

2.1

CVE-2013-2978

  • EPSS 0.14%
  • Veröffentlicht 27.08.2013 03:34:35
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Absolute path traversal vulnerability in the server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1, 10.1.1, 10.2, and 10.2.1 allows remote authenticated users to read files by leveraging the Report Author privilege, a different vulnerability th...