CVE-2012-4836
N/A
N/A
Summary
Cross-site scripting (XSS) vulnerability in IBM Cognos Business Intelligence (BI) 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted string that is not properly handled during rendering of stored data.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- http://www-01.ibm.com/support/docview.wss?uid=swg24034373
- http://www-01.ibm.com/support/docview.wss?uid=swg21626697
- https://exchange.xforce.ibmcloud.com/vulnerabilities/78918
References
- http://www-01.ibm.com/support/docview.wss?uid=swg24034373
- http://www-01.ibm.com/support/docview.wss?uid=swg21626697
- https://exchange.xforce.ibmcloud.com/vulnerabilities/78918
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.