CVE-2014-0861

Опубликовано: 22 фев. 2014

Источник: nvd

CVSS2: 3.5

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in the server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1 before IF6, 10.1.1 before IF5, 10.2 before IF7, 10.2.1 before IF4, and 10.2.1.1 before IF4 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter that is not properly handled during use of the Back button.

Ссылки

http://www-01.ibm.com/support/docview.wss?uid=swg21662856
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21662856
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:cognos_business_intelligence:8.4.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:cognos_business_intelligence:10.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:cognos_business_intelligence:10.1.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:cognos_business_intelligence:10.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:cognos_business_intelligence:10.2.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:cognos_business_intelligence:10.2.1.1:*:*:*:*:*:*:*

EPSS

Процентиль: 38%

0.00166

Низкий

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-xh45-57vp-7gw8

github

больше 3 лет назад