CVE-2017-1486

概要

参考情報

• ibm.com/support/docview.wss · Vendor Advisory
• exchange.xforce.ibmcloud.com/vulnerabilities/128624 · VDB Entry

cognos business intelligence のその他の脆弱性

• CVE-2018-1934高 8.8IBM Cognos Business Intelligence 10.2.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and u…
• CVE-2017-1764高 7.0IBM Cognos Business Intelligence 10.2, 10.2.1, 10.2.1.1, and 10.2.2, under specialized circumstances, could expose plain text credentials to…
• CVE-2016-0254中 6.5IBM Cognos Business Intelligence 10.1 and 10.2 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error …
• CVE-2016-3038中 5.4IBM Cognos TM1 10.1 and 10.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in th…
• CVE-2016-3037中 5.7IBM Cognos TM1 10.1 and 10.2 provides a service to return the victim's password with a valid session key. An authenticated attacker with use…