CVE-2016-0217
01.02.2017, 22:59
IBM Cognos Business Intelligence and IBM Cognos Analytics are vulnerable to stored cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to inject malicious script into a Web page which would be executed in a victim's Web browser within the security context of the hosting Web site, once the page is viewed. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| ibm | cognos_analytics | 11.0.0 |
| ibm | cognos_analytics | 11.0.1 |
| ibm | cognos_analytics | 11.0.2 |
| ibm | cognos_analytics | 11.0.3 |
| ibm | cognos_analytics | 11.0.4 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| ibm | cognos_business_intelligence | 10 | CNA |
| ibm | cognos_business_intelligence | 8.3.0 | CNA |
| ibm | cognos_business_intelligence | 8.4.1 | CNA |
| ibm | cognos_business_intelligence | 8.4 | CNA |
| ibm | cognos_business_intelligence | 10.1 | CNA |
| ibm | cognos_business_intelligence | 10.1.1 | CNA |
| ibm | cognos_business_intelligence | 10.2 | CNA |
| ibm | cognos_business_intelligence | 10.2.1 | CNA |
| ibm | cognos_business_intelligence | 10.2.1.1 | CNA |
| ibm | cognos_business_intelligence | 10.2.2 | CNA |