CVE-2016-3038

概要

参考情報

• ibm.com/support/docview.wss · Patch
• securityfocus.com/bid/97915 · Third Party Advisory

cognos business intelligence のその他の脆弱性

• CVE-2018-1934高 8.8IBM Cognos Business Intelligence 10.2.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and u…
• CVE-2017-1764高 7.0IBM Cognos Business Intelligence 10.2, 10.2.1, 10.2.1.1, and 10.2.2, under specialized circumstances, could expose plain text credentials to…
• CVE-2017-1486中 6.1IBM Cognos Business Intelligence 10.2, 10.2.1, 10.2.1.1, and 10.2.2 is vulnerable to cross-site scripting. This vulnerability allows users t…
• CVE-2016-0254中 6.5IBM Cognos Business Intelligence 10.1 and 10.2 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error …
• CVE-2016-3037中 5.7IBM Cognos TM1 10.1 and 10.2 provides a service to return the victim's password with a valid session key. An authenticated attacker with use…