IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 178506.
2021-06-01T14:15:08.457
2024-11-21T05:32:38.033
Modified
CVSSv3.1: 5.4 (MEDIUM)
AV:N/AC:M/Au:S/C:N/I:P/A:N
6.8
2.9
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Application | ibm | cognos_analytics | 11.0.0 | Yes |
Application | ibm | cognos_analytics | 11.1.0 | Yes |
Application | netapp | oncommand_insight | - | Yes |