PT-2014-7065
CVE-2014-6145
·
تاريخ النشر
2014-12-12
·
تاريخ التحديث
2017-09-08
الوصف من
CVSS 2.0
3.5
منخفضةالمقاييسAV:N/AC:M/Au:S/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
IBM Cognos Business Intelligence versions 10.1 before IF10
IBM Cognos Business Intelligence versions 10.1.1 before IF9
IBM Cognos Business Intelligence versions 10.2 before IF11
IBM Cognos Business Intelligence versions 10.2.1 before IF8
IBM Cognos Business Intelligence versions 10.2.1.1 before IF7
Description
A cross-site scripting (XSS) issue exists in the server, allowing remote authenticated users to inject arbitrary web script or HTML via a crafted URL. This can be achieved by manipulating the URL in a way that injects malicious script or HTML code.
Recommendations
For IBM Cognos Business Intelligence version 10.1 before IF10, apply the IF10 fix to resolve the issue.
For IBM Cognos Business Intelligence version 10.1.1 before IF9, apply the IF9 fix to resolve the issue.
For IBM Cognos Business Intelligence version 10.2 before IF11, apply the IF11 fix to resolve the issue.
For IBM Cognos Business Intelligence version 10.2.1 before IF8, apply the IF8 fix to resolve the issue.
For IBM Cognos Business Intelligence version 10.2.1.1 before IF7, apply the IF7 fix to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾