Описание
IBM Cognos Analytics 11.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 127583.
Ссылки
- PatchVendor Advisory
- VDB EntryVendor Advisory
- PatchVendor Advisory
- VDB EntryVendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:ibm:cognos_analytics:11.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:cognos_analytics:11.0.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:cognos_analytics:11.0.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:cognos_analytics:11.0.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:cognos_analytics:11.0.4:*:*:*:*:*:*:*
cpe:2.3:a:ibm:cognos_analytics:11.0.5:*:*:*:*:*:*:*
cpe:2.3:a:ibm:cognos_analytics:11.0.6:*:*:*:*:*:*:*
EPSS
Процентиль: 49%
0.00257
Низкий
6.1 Medium
CVSS3
5.8 Medium
CVSS2
Дефекты
CWE-20
Связанные уязвимости
CVSS3: 6.1
github
больше 3 лет назад
IBM Cognos Analytics 11.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 127583.
EPSS
Процентиль: 49%
0.00257
Низкий
6.1 Medium
CVSS3
5.8 Medium
CVSS2
Дефекты
CWE-20