cbcvebase.
CVE-2012-4858
published 2013-03-05

CVE-2012-4858: IBM Cognos Business Intelligence (BI) 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 does not properly validate Java serialized…

critical9.3CVSS 3.1
AVNACMAuNCCICAC
IBM Cognos Business Intelligence (BI) 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 does not properly validate Java serialized input, which allows remote attackers to execute arbitrary commands via unspecified vectors.

Affected

4 ranges
VendorProductVersion rangeFixed in
ibmcognos_business_intelligence——
ibmcognos_business_intelligence——
ibmcognos_business_intelligence——
ibmcognos_business_intelligence——

CVSS provenance

nvd9.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C
ghsa5.0MEDIUM