Page 5 of 41 results (0.005 seconds)

CVSS: 6.5EPSS: 0%CPEs: 8EXPL: 0

CVE-2020-4301

https://notcve.org/view.php?id=CVE-2020-4301

IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 176609. IBM Cognos Analytics versiones 11.1.7, 11.2.0 y 11.2.1, es vulnerable a un ataque de tipo cross-site request forgery, lo que podría permitir a un atacante ejecutar acciones maliciosas y no autorizadas transmitidas desde un usuario en el que el sitio web confía. IBM X-Force ID: 176609 • https://exchange.xforce.ibmcloud.com/vulnerabilities/176609 https://security.netapp.com/advisory/ntap-20221014-0005 https://www.ibm.com/support/pages/node/6615285 • CWE-352: Cross-Site Request Forgery (CSRF) •

CVSS: 6.1EPSS: 0%CPEs: 10EXPL: 0

CVE-2021-39047

https://notcve.org/view.php?id=CVE-2021-39047

IBM Planning Analytics 2.0 and IBM Cognos Analytics 11.2.1, 11.2.0, and 11.1.7 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 214349. IBM Planning Analytics versión 2.0 e IBM Cognos Analytics versiones 11.2.1, 11.2.0 y 11.1.7, son vulnerables a un ataque de tipo cross-site scripting. Esta vulnerabilidad permite a usuarios insertar código JavaScript arbitrario en la Interfaz de Usuario Web, alterando así la funcionalidad prevista y conllevando potencialmente a una divulgación de credenciales dentro de una sesión confiable. • https://exchange.xforce.ibmcloud.com/vulnerabilities/214349 https://security.netapp.com/advisory/ntap-20220729-0002 https://www.ibm.com/support/pages/node/6565099 https://www.ibm.com/support/pages/node/6597241 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 9.8EPSS: 0%CPEs: 9EXPL: 0

CVE-2021-38945

https://notcve.org/view.php?id=CVE-2021-38945

IBM Cognos Analytics 11.2.1, 11.2.0, and 11.1.7 could allow a remote attacker to upload arbitrary files, caused by improper content validation. IBM X-Force ID: 211238. IBM Cognos Analytics versiones 11.2.1, 11.2.0 y 11.1.7, podrían permitir a un atacante remoto cargar archivos arbitrarios, causados por una incorrecta comprobación del contenido. IBM X-Force ID: 211238 • https://exchange.xforce.ibmcloud.com/vulnerabilities/211238 https://security.netapp.com/advisory/ntap-20220729-0002 https://www.ibm.com/support/pages/node/6597241 • CWE-434: Unrestricted Upload of File with Dangerous Type •

CVSS: 6.5EPSS: 0%CPEs: 9EXPL: 0

CVE-2021-29768

https://notcve.org/view.php?id=CVE-2021-29768

IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could allow a low level user to obtain sensitive information from the details of the 'Cloud Storage' page for which they should not have access. IBM X-Force ID: 202682. IBM Cognos Analytics versiones 11.1.7, 11.2.0 y 11.2.1, podría permitir a un usuario de bajo nivel obtener información confidencial de los detalles de la página "Cloud Storage" a la que no debería tener acceso. IBM X-Force ID: 202682 • https://exchange.xforce.ibmcloud.com/vulnerabilities/202682 https://security.netapp.com/advisory/ntap-20220729-0002 https://www.ibm.com/support/pages/node/6597241 •

CVSS: 5.4EPSS: 0%CPEs: 4EXPL: 0

CVE-2021-38946

https://notcve.org/view.php?id=CVE-2021-38946

IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 211240. IBM Cognos Analytics 11.1.7, 11.2.0 y 11.1.7, es vulnerable a un ataque de tipo cross-site scripting. Esta vulnerabilidad permite a usuarios insertar código JavaScript arbitrario en la Interfaz de Usuario Web, alterando así la funcionalidad prevista y conllevando potencialmente a una divulgación de credenciales dentro de una sesión confiable. • https://exchange.xforce.ibmcloud.com/vulnerabilities/211240 https://security.netapp.com/advisory/ntap-20220602-0003 https://www.ibm.com/support/pages/node/6570957 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •