Cognos Tm1 (Ibm) - vulnerabilities (CVEs)
9 CVEs, 0 in the last 30 days, 21 known versions, newest CVE from 2018-01-26. Vendor: Ibm.
CVEs of Cognos Tm1
- CVE-2017-1506 - CVSS 6.1 (medium), 2018-01-26: IBM Cognos TM1 10.2 and 10.2.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…
- CVE-2016-0381 - CVSS 4.3 (medium), 2016-05-15: IBM Cognos TM1 10.2.2 before FP5, when the host/pmhub/pm/admin AdminGroups setting is empty, allows remote authenticated users to cause a denial of service…
- CVE-2014-0877 - CVSS 5 (medium), 2014-09-05: IBM Cognos TM1 10.2.0.2 before IF1 and 10.2.2.0 before IF1 allows remote attackers to bypass intended access restrictions by visiting the Rights page and then…
- CVE-2014-0863 - CVSS 4 (medium), 2014-09-05: The client in IBM Cognos TM1 9.5.2.3 before IF5, 10.1.1.2 before IF1, 10.2.0.2 before IF1, and 10.2.2.0 before IF1 stores obfuscated passwords in memory,…
- CVE-2013-0484 - CVSS 4.3 (medium), 2013-06-19: The server process in IBM Cognos TM1 10.1.x before 10.1.1 FP1 allows remote attackers to cause a denial of service (daemon crash) via an undocumented API call…
- CVE-2012-6350 - CVSS 4.3 (medium), 2013-01-31: Cross-site scripting (XSS) vulnerability in the Web component in IBM Cognos TM1 before 9.5.2 FP3 and 10.1 before 10.1 FP1 allows remote attackers to inject…
- CVE-2012-0202 - CVSS 10 (critical), 2012-05-04: Multiple stack-based buffer overflows in tm1admsd.exe in the Admin Server in IBM Cognos TM1 9.4.x and 9.5.x before 9.5.2 FP2 allow remote attackers to cause a…
- CVE-2012-1046 - CVSS 4.3 (medium), 2012-02-10: Cross-site scripting (XSS) vulnerability in TM1 Web in IBM Cognos TM1 9.5.2 FP1 allows remote attackers to inject arbitrary web script or HTML via unspecified…
- CVE-2012-0696 - CVSS 4.3 (medium), 2012-01-13: Multiple cross-site scripting (XSS) vulnerabilities in the Executive Viewer (EV) in IBM Cognos TM1 before 9.5 FP1 allow remote attackers to inject arbitrary…
