Cross site scripting

2014-02-2221:55:00

PRIOn knowledge base

www.prio-n.com

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.3%

JSON

Cross-site scripting (XSS) vulnerability in the server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1 before IF6, 10.1.1 before IF5, 10.2 before IF7, 10.2.1 before IF4, and 10.2.1.1 before IF4 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter.

CPENameOperatorVersion
cognos_business_intelligenceeq10.2.1
cognos_business_intelligenceeq10.2
cognos_business_intelligenceeq10.1.1
cognos_business_intelligenceeq10.2.1.1
cognos_business_intelligenceeq10.1
cognos_business_intelligenceeq8.4.1

Name	Operator	Version
cognos_business_intelligence	eq	10.2.1
cognos_business_intelligence	eq	10.2
cognos_business_intelligence	eq	10.1.1
cognos_business_intelligence	eq	10.2.1.1
cognos_business_intelligence	eq	10.1
cognos_business_intelligence	eq	8.4.1