CB
Product
Cognos Business Intelligence
31
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 9Low 1
Watch
Add Cognos Business Intelligence to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-0254 | 6.5 | Jun 7 | IBM Cognos Business Intelligence 10.1 and 10.2 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data Affected: 10.1.1; 10.2; 10.2.1; 10.2.1.1; 10.2.2 |
| CVE-2017-1486 | 6.1 | Apr 23 | IBM Cognos Business Intelligence 10.2, 10.2.1, 10.2.1.1, and 10.2.2 is vulnerable to cross-site scripting Affected: 10.2; 10.2.1; 10.2.1.1; 10.2.2 |
| CVE-2016-3037 | 5.7 | Apr 17 | IBM Cognos TM1 10.1 and 10.2 provides a service to return the victim's password with a valid session key Affected: 10.1; 10.2; 10.2.2 |
| CVE-2016-9985 | 5.5 | Mar 8 | IBM Cognos Server 10.1.1 and 10.2 stores highly sensitive information in log files that could be read by a local user Affected: 10.1.1; 10.2 |
| CVE-2016-3038 | 5.4 | Apr 17 | IBM Cognos TM1 10.1 and 10.2 is vulnerable to cross-site scripting Affected: 10.1; 10.2; 10.2.2 |
| CVE-2016-0218 | 5.4 | Feb 1 | IBM Cognos Business Intelligence and IBM Cognos Analytics are vulnerable to cross-site scripting, caused by improper validation of user-supplied input Affected: 10.1.1; 10.2; 10.2.1; 10.2.1.1; 10.2.2 |
| CVE-2016-0346 | 5.4 | Jul 3 | Cross-site scripting (XSS) vulnerability in IBM Cognos Business Intelligence 10.2 before IF20, 10.2.1 before IF17, 10.2.1.1 before IF16, 10.2.2 before IF12, and 10.1.1 before IF19… Affected: 10.1.1; 10.2; 10.2.1; 10.2.1.1; 10.2.2 |
| CVE-2016-0221 | 5.4 | Jul 3 | Cross-site scripting (XSS) vulnerability in IBM Cognos TM1, as used in IBM Cognos Business Intelligence 10.2 before IF20, 10.2.1 before IF17, 10.2.1.1 before IF16, 10.2.2 before… Affected: 10.1.1; 10.2; 10.2.1; 10.2.1.1; 10.2.2 |
| CVE-2016-9710 | 5.3 | Jun 7 | IBM Predictive Solutions Foundation (formerly PMQ) could allow a remote attacker to include arbitrary files Affected: 10.1.1; 10.2; 10.2.1; 10.2.1.1; 10.2.2 |
Showing 9