Page 4 of 43 results (0.016 seconds)

CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0

CVE-2016-9711

https://notcve.org/view.php?id=CVE-2016-9711

22 Mar 2018 — IBM Predictive Solutions Foundation (IBM Cognos Analytics 11.0) reveals sensitive information in detailed error messages that could aid an attacker in further attacks against the system. IBM X-Force ID: 119619. IBM Predictive Solutions Foundation (IBM Cognos Analytics 11.0) revela información sensible en mensajes de error detallados que podrían ayudar a un atacante a la hora de realizar más ataques contra el sistema. IBM X-Force ID: 119619. • http://www.ibm.com/support/docview.wss?uid=swg22014337 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 7.8EPSS: 0%CPEs: 9EXPL: 0

CVE-2017-1779

https://notcve.org/view.php?id=CVE-2017-1779

29 Jan 2018 — IBM Cognos Analytics 11.0 could store cached credentials locally that could be obtained by a local user. IBM X-Force ID: 136824. IBM Cognos Analytics 11.0 podría almacenar localmente credenciales en caché que podrían ser obtenidas por un usuario local. IBM X-Force ID: 136824. • http://www.ibm.com/support/docview.wss?uid=swg22011561 • CWE-522: Insufficiently Protected Credentials •

CVSS: 4.0EPSS: 0%CPEs: 9EXPL: 0

CVE-2017-1783

https://notcve.org/view.php?id=CVE-2017-1783

29 Jan 2018 — IBM Cognos Analytics 11.0 could allow a local user to change parameters set from the Cognos Analytics menus without proper authentication. IBM X-Force ID: 136857. IBM Cognos Analytics 11.0 podría permitir que un usuario local cambie parámetros establecidos desde los menús de Cognos Analytics sin una autenticación correcta. IBM X-Force ID: 136857. • http://www.ibm.com/support/docview.wss?uid=swg22011561 • CWE-287: Improper Authentication •

CVSS: 5.5EPSS: 0%CPEs: 9EXPL: 0

CVE-2017-1784

https://notcve.org/view.php?id=CVE-2017-1784

29 Jan 2018 — IBM Cognos Analytics 11.0 could produce results in temporary files that contain highly sensitive information that can be read by a local user. IBM X-Force ID: 136858. IBM Cognos Analytics 11.0 podría producir resultados en archivos temporales que contengan información altamente sensible que puede ser leída por un usuario local. IBM X-Force ID: 136858. • http://www.ibm.com/support/docview.wss?uid=swg22011561 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 5.4EPSS: 0%CPEs: 7EXPL: 0

CVE-2017-1535

https://notcve.org/view.php?id=CVE-2017-1535

29 Aug 2017 — IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 130677. IBM Cognos Analytics 11.0 es vulnerable a Cross-Site Scripting (XSS) Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, alterando las funcionalidades planeadas. Esto p... • http://www.ibm.com/support/docview.wss?uid=swg22007242 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.1EPSS: 0%CPEs: 7EXPL: 0

CVE-2017-1427

https://notcve.org/view.php?id=CVE-2017-1427

29 Aug 2017 — IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 127579. IBM Cognos Analytics 11.0 es vulnerable a cross-site scripting. Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, alterando las funcionalidades planeadas. • http://www.ibm.com/support/docview.wss?uid=swg22007242 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.1EPSS: 0%CPEs: 7EXPL: 0

CVE-2017-1428

https://notcve.org/view.php?id=CVE-2017-1428

29 Aug 2017 — IBM Cognos Analytics 11.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 127583. IBM Cognos Analytics 11.0 podría permitir que un atacante remoto secuestre la acción de clicado de la víctima. Al persuadir a una víctima para que visite un sitio web malicioso, un atacante... • http://www.ibm.com/support/docview.wss?uid=swg22007242 • CWE-20: Improper Input Validation •

CVSS: 5.4EPSS: 0%CPEs: 7EXPL: 0

CVE-2017-1485

https://notcve.org/view.php?id=CVE-2017-1485

29 Aug 2017 — IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 128623. IBM Cognos Analytics 11.0 es vulnerable a cross-site scripting. Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, alterando las funcionalidades planeadas. • http://www.ibm.com/support/docview.wss?uid=swg22007242 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.4EPSS: 0%CPEs: 7EXPL: 0

CVE-2016-3032

https://notcve.org/view.php?id=CVE-2016-3032

10 May 2017 — IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 114516. IBM Cognos Analytics 11.0 es vulnerable a XSS. Esta vulnerabilidad permite a los usuarios integrar código JavaScript arbitrario en la interfaz de usuario Web, alterando así la funcionalidad prevista que conduciría a la divulgació... • https://www.ibm.com/support/docview.wss?uid=swg21999791 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.4EPSS: 0%CPEs: 5EXPL: 0

CVE-2016-3015

https://notcve.org/view.php?id=CVE-2016-3015

05 Apr 2017 — IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1998887. IBM Cognos Analytics 11.0 es vulnerable a secuencias de comandos en sitios cruzados. Esta vulnerabilidad permite a usuarios encrustrar código arbitrario JavaScript en la Web UI alterando así la funcionalidad prevista que potenc... • http://www.ibm.com/support/docview.wss?uid=swg21998887 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •