CVE-2018-1934

Description

References

• exchange.xforce.ibmcloud.com/vulnerabilities/153179 · VDB Entry
• ibm.com/support/pages/node/1142626 · Vendor Advisory

More vulnerabilities in cognos business intelligence

• CVE-2017-1764HIGH 7.0IBM Cognos Business Intelligence 10.2, 10.2.1, 10.2.1.1, and 10.2.2, under specialized circumstances, could expose plain text credentials to…
• CVE-2017-1486MEDIUM 6.1IBM Cognos Business Intelligence 10.2, 10.2.1, 10.2.1.1, and 10.2.2 is vulnerable to cross-site scripting. This vulnerability allows users t…
• CVE-2016-0254MEDIUM 6.5IBM Cognos Business Intelligence 10.1 and 10.2 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error …
• CVE-2016-3038MEDIUM 5.4IBM Cognos TM1 10.1 and 10.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in th…
• CVE-2016-3037MEDIUM 5.7IBM Cognos TM1 10.1 and 10.2 provides a service to return the victim's password with a valid session key. An authenticated attacker with use…