Cognos Business Intelligence (Ibm) - vulnerabilities (CVEs)

29 CVEs, 0 in the last 30 days, 14 known versions, newest CVE from 2019-12-20. Vendor: Ibm.

CVEs of Cognos Business Intelligence

CVE-2018-1934 - CVSS 8.8 (high), 2019-12-20: IBM Cognos Business Intelligence 10.2.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized…
CVE-2017-1486 - CVSS 6.1 (medium), 2018-04-23: IBM Cognos Business Intelligence 10.2, 10.2.1, 10.2.1.1, and 10.2.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary…
CVE-2017-1764 - CVSS 7 (high), 2018-04-23: IBM Cognos Business Intelligence 10.2, 10.2.1, 10.2.1.1, and 10.2.2, under specialized circumstances, could expose plain text credentials to a local user. IBM…
CVE-2017-1125 - CVSS 3.3 (low), 2017-06-07: IBM Cognos Analytics 10.1 and 10.2 could allow a local user to craft a URL which could confirm the existence of and expose postial contents of a file. IBM…
CVE-2016-9710 - CVSS 5.3 (medium), 2017-06-07: IBM Predictive Solutions Foundation (formerly PMQ) could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted…
CVE-2016-0254 - CVSS 6.5 (medium), 2017-06-07: IBM Cognos Business Intelligence 10.1 and 10.2 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing…
CVE-2016-3036 - CVSS 7.5 (high), 2017-04-17: IBM Cognos TM1 10.1 and 10.2 is vulnerable to a denial of service, caused by a stack-based buffer overflow when parsing packets. A remote attacker could…
CVE-2016-3038 - CVSS 5.4 (medium), 2017-04-17: IBM Cognos TM1 10.1 and 10.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…
CVE-2016-3037 - CVSS 5.7 (medium), 2017-04-17: IBM Cognos TM1 10.1 and 10.2 provides a service to return the victim's password with a valid session key. An authenticated attacker with user interaction…
CVE-2016-8960 - CVSS 8.8 (high), 2017-03-27: IBM Cognos Business Intelligence 10.2 could allow a user with lower privilege Capabilities to adopt the Capabilities of a higher-privilege user by…
CVE-2016-9985 - CVSS 5.5 (medium), 2017-03-08: IBM Cognos Server 10.1.1 and 10.2 stores highly sensitive information in log files that could be read by a local user. IBM Reference #: 1999671.
CVE-2016-0218 - CVSS 5.4 (medium), 2017-02-01: IBM Cognos Business Intelligence and IBM Cognos Analytics are vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A…
CVE-2016-0346 - CVSS 5.4 (medium), 2016-07-03: Cross-site scripting (XSS) vulnerability in IBM Cognos Business Intelligence 10.2 before IF20, 10.2.1 before IF17, 10.2.1.1 before IF16, 10.2.2 before IF12,…
CVE-2016-0221 - CVSS 5.4 (medium), 2016-07-03: Cross-site scripting (XSS) vulnerability in IBM Cognos TM1, as used in IBM Cognos Business Intelligence 10.2 before IF20, 10.2.1 before IF17, 10.2.1.1 before…
CVE-2014-6145 - CVSS 3.5 (low), 2014-12-12: Cross-site scripting (XSS) vulnerability in the server in IBM Cognos Business Intelligence 10.1 before IF10, 10.1.1 before IF9, 10.2 before IF11, 10.2.1…
CVE-2014-0861 - CVSS 3.5 (low), 2014-02-22: Cross-site scripting (XSS) vulnerability in the server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1 before IF6, 10.1.1 before IF5, 10.2 before IF7,…
CVE-2014-0854 - CVSS 5 (medium), 2014-02-22: The server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1 before IF6, 10.1.1 before IF5, 10.2 before IF7, 10.2.1 before IF4, and 10.2.1.1 before IF4…
CVE-2013-6732 - CVSS 4.3 (medium), 2014-02-22: Cross-site scripting (XSS) vulnerability in the server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1 before IF6, 10.1.1 before IF5, 10.2 before IF7,…
CVE-2013-4034 - CVSS 4 (medium), 2013-11-18: IBM Cognos Business Intelligence 8.4.1 before IF3, 10.1.0 before IF4, 10.1.1 before IF4, 10.2.0 before IF4, 10.2.1 before IF2, and 10.2.1.1 before IF1 allows…
CVE-2013-3030 - CVSS 5 (medium), 2013-11-18: The servlet gateway in IBM Cognos Business Intelligence 8.4.1 before IF3, 10.1.0 before IF4, 10.1.1 before IF4, 10.2.0 before IF4, 10.2.1 before IF2, and…
CVE-2013-2978 - CVSS 2.1 (low), 2013-08-27: Absolute path traversal vulnerability in the server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1, 10.1.1, 10.2, and 10.2.1 allows remote authenticated…
CVE-2013-2988 - CVSS 2.6 (low), 2013-08-27: Absolute path traversal vulnerability in the server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1, 10.1.1, 10.2, and 10.2.1 allows remote authenticated…
CVE-2013-0586 - CVSS 3.5 (low), 2013-08-27: Cross-site scripting (XSS) vulnerability in the server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1, 10.1.1, 10.2, and 10.2.1 allows remote…
CVE-2012-4858 - CVSS 9.3 (critical), 2013-03-05: IBM Cognos Business Intelligence (BI) 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 does not properly validate Java serialized…
CVE-2012-4840 - CVSS 5 (medium), 2013-03-05: IBM Cognos Business Intelligence (BI) 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 allows remote attackers to conduct XPath…
CVE-2012-4837 - CVSS 4 (medium), 2013-03-05: IBM Cognos Business Intelligence (BI) 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 allows remote authenticated users to conduct…
CVE-2012-4835 - CVSS 4.3 (medium), 2013-03-05: Cross-site scripting (XSS) vulnerability in IBM Cognos Business Intelligence (BI) 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1…
CVE-2012-4836 - CVSS 3.5 (low), 2013-03-05: Cross-site scripting (XSS) vulnerability in IBM Cognos Business Intelligence (BI) 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1…
CVE-2012-2193 - CVSS 4.3 (medium), 2013-03-05: Cross-site scripting (XSS) vulnerability in Query Studio in IBM Cognos Business Intelligence (BI) 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and…
CVE-2012-2177 - CVSS 4.3 (medium), 2013-03-05: Cross-site scripting (XSS) vulnerability in IBM Cognos Business Intelligence (BI) 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1…
CVE-2012-4847 - CVSS 4 (medium), 2012-11-14: IBM Cognos Business Intelligence (BI) 8.4 and 8.4.1 allows remote authenticated users to cause a denial of service (CPU consumption) via a crafted request…