CVE-2016-0346

published 2016-07-03

CVE-2016-0346: Cross-site scripting (XSS) vulnerability in IBM Cognos Business Intelligence 10.2 before IF20, 10.2.1 before IF17, 10.2.1.1 before IF16, 10.2.2 before IF12…

medium 5.4 CVSS 3.0

AV N AC L PR L UI R S C C L I L A N

Cross-site scripting (XSS) vulnerability in IBM Cognos Business Intelligence 10.2 before IF20, 10.2.1 before IF17, 10.2.1.1 before IF16, 10.2.2 before IF12, and 10.1.1 before IF19 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
ibm	cognos_business_intelligence	—	—
ibm	cognos_business_intelligence	—	—
ibm	cognos_business_intelligence	—	—
ibm	cognos_business_intelligence	—	—
ibm	cognos_business_intelligence	—	—

CWE-79