PT-2013-1727
CVE-2012-4840
·
تاريخ النشر
2013-03-02
·
تاريخ التحديث
2017-08-29
الوصف من
CVSS 2.0
5.0
متوسطةالمقاييسAV:N/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
IBM Cognos Business Intelligence (BI) versions 8.4.1 through 8.4.1 before IF1
IBM Cognos Business Intelligence (BI) versions 10.1 through 10.1 before IF2
IBM Cognos Business Intelligence (BI) versions 10.1.1 through 10.1.1 before IF2
IBM Cognos Business Intelligence (BI) versions 10.2 through 10.2 before IF1
Description
The issue allows remote attackers to conduct XPath injection attacks and call XPath extension functions via unspecified vectors.
Recommendations
For IBM Cognos Business Intelligence (BI) version 8.4.1, apply IF1 to resolve the issue.
For IBM Cognos Business Intelligence (BI) versions 10.1 and 10.1.1, apply IF2 to resolve the issue.
For IBM Cognos Business Intelligence (BI) version 10.2, apply IF1 to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾