Lucene search
IbmCVE-2012-4840HistoryMar 05, 2013 - 5:02 a.m.
CVE-2012-4840
2013-03-0505:02:08
CWE-94
ibm
web.nvd.nist.gov
32
ibm cognos
bi
xpath
injection
vulnerability
nvd
cve-2012-4840
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
7
Confidence
Low
EPSS
0.002
Percentile
64.8%
IBM Cognos Business Intelligence (BI) 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 allows remote attackers to conduct XPath injection attacks, and call XPath extension functions, via unspecified vectors.
Affected configurations
Node
ibmcognos_business_intelligenceMatch8.4.1
ORibmcognos_business_intelligenceMatch10.1
ORibmcognos_business_intelligenceMatch10.1.1
ORibmcognos_business_intelligenceMatch10.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | cognos_business_intelligence | 8.4.1 | cpe:2.3:a:ibm:cognos_business_intelligence:8.4.1:*:*:*:*:*:*:* |
| ibm | cognos_business_intelligence | 10.1 | cpe:2.3:a:ibm:cognos_business_intelligence:10.1:*:*:*:*:*:*:* |
| ibm | cognos_business_intelligence | 10.1.1 | cpe:2.3:a:ibm:cognos_business_intelligence:10.1.1:*:*:*:*:*:*:* |
| ibm | cognos_business_intelligence | 10.2 | cpe:2.3:a:ibm:cognos_business_intelligence:10.2:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2012-4840
2013-03-02 21:00:00
prion
prion
Design/Logic Flaw
2013-03-05 05:02:00
nvd
nvd
CVE-2012-4840
2013-03-05 05:02:08
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
7
Confidence
Low
EPSS
0.002
Percentile
64.8%
Related for CVE-2012-4840