Description
Cross-site scripting (XSS) vulnerability in IBM Cognos Business Intelligence 10.2 before IF20, 10.2.1 before IF17, 10.2.1.1 before IF16, 10.2.2 before IF12, and 10.1.1 before IF19 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
References (3)
Core 3
Core References
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21984323
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/85864
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1036221
Scores
CVSS v3
5.4
EPSS
0.0110
EPSS Percentile
62.3%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Details
CWE
CWE-79
Status
published
Products (5)
ibm/cognos_business_intelligence
10.1.1
ibm/cognos_business_intelligence
10.2
ibm/cognos_business_intelligence
10.2.1
ibm/cognos_business_intelligence
10.2.1.1
ibm/cognos_business_intelligence
10.2.2
Published
Jul 03, 2016
Tracked Since
Feb 18, 2026