CVSS 8.2 · High EPSS 0,31%
Kerentanan Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') pada ibm cognos analytics, ibm cognos transformer. Skor CVSS 3.1 8.2 (High) menurut NVD.
IBM Cognos Analytics 11.2.0, 11.2.4, 12.0, and 12.1.0 and IBM Cognos Transformer 11.2.4, 12.0, and 12.1.0 are vulnerable to cross-site scripting (XSS). This vulnerability allows a remote attacker to inject arbitrary JavaScript code into the web user interface, which may alter the intended functionality and could lead to the disclosure of credentials within a trusted session.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| ibm | cognos analytics | Versi 11.2.0 hingga sebelum 11.2.4 |
| ibm | cognos analytics | Versi 12.0.0 hingga sebelum 12.0.4 |
| ibm | cognos analytics | Versi 12.1.0 hingga sebelum 12.1.2 |
| ibm | cognos analytics | Versi 11.2.4 |
| ibm | cognos analytics | Versi 11.2.4 fixpack1 |
| ibm | cognos analytics | Versi 11.2.4 fixpack2 |
| ibm | cognos analytics | Versi 11.2.4 fixpack3 |
| ibm | cognos analytics | Versi 11.2.4 fixpack4 |
| ibm | cognos analytics | Versi 11.2.4 fixpack5 |
| ibm | cognos analytics | Versi 11.2.4 fixpack6 |
| ibm | cognos analytics | Versi 11.2.4 interim_fix_1 |
| ibm | cognos analytics | Versi 11.2.4 interim_fix_2 |
| ibm | cognos analytics | Versi 11.2.4 interim_fix_3 |
| ibm | cognos analytics | Versi 11.2.4 interim_fix_4 |
| ibm | cognos analytics | Versi 11.2.4 interim_fix_5 |
| ibm | cognos analytics | Versi 12.0.4 interim_fix_1 |
| ibm | cognos analytics | Versi 12.0.4 interim_fix_2 |
| ibm | cognos analytics | Versi 12.0.4 interim_fix_3 |
| ibm | cognos transformer | Versi 11.2.4 |
| ibm | cognos transformer | Versi 12.0 |
| ibm | cognos transformer | Versi 12.1.0 |