Unscored severity · published Jan 13, 2012
CVE-2012-0696
Multiple cross-site scripting (XSS) vulnerabilities in the Executive Viewer (EV) in IBM Cognos TM1 before 9.5 FP1 allow remote attackers to inject arbitrary web script or HTML via…
–
CVSS
1.3%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Executive Viewer (EV) in IBM Cognos TM1 before 9.5 FP1 allow remote attackers to inject arbitrary web script or HTML via unspecified requests to (1) aspnet_client or (2) evserver/createcontrol.js.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CE
Cognos Executive Viewer · Ibm
All versions, or not specified · source: NVD
CT
Cognos Tm1 · Ibm
through 9.4.1.3; 9.4.0; 9.4.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-0696
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-0696
Vendor Advisory
http://secunia.com/advisories/47487
securitytracker.com
http://securitytracker.com/id?1026491
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1PM26682
www.osvdb.org
http://www.osvdb.org/78216
www.osvdb.org
http://www.osvdb.org/78217
www.securityfocus.com
http://www.securityfocus.com/bid/51326