Cross site scripting

2014-02-2221:55:00

PRIOn knowledge base

www.prio-n.com

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.4%

JSON

Cross-site scripting (XSS) vulnerability in the server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1 before IF6, 10.1.1 before IF5, 10.2 before IF7, 10.2.1 before IF4, and 10.2.1.1 before IF4 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter that is not properly handled during use of the Back button.

CPENameOperatorVersion
cognos_business_intelligenceeq10.2.1
cognos_business_intelligenceeq10.2
cognos_business_intelligenceeq10.1.1
cognos_business_intelligenceeq10.2.1.1
cognos_business_intelligenceeq10.1
cognos_business_intelligenceeq8.4.1

Name	Operator	Version
cognos_business_intelligence	eq	10.2.1
cognos_business_intelligence	eq	10.2
cognos_business_intelligence	eq	10.1.1
cognos_business_intelligence	eq	10.2.1.1
cognos_business_intelligence	eq	10.1
cognos_business_intelligence	eq	8.4.1

References

www-01.ibm.com/support/docview.wss?uid=swg21662856