Description
Cross-site scripting (XSS) vulnerability in cognos.cgi in IBM Cognos 8 Business Intelligence (BI) 8.4.1 before FP1 allows remote attackers to inject arbitrary web script or HTML via the pathinfo parameter.
References
- 45781 vdb-entry
- 1024954 vdb-entry
- ibm-cognos-pathinfo-xss(64660) vdb-entry
- ADV-2011-0090 vdb-entry
- http://www-01.ibm.com/support/docview.wss?uid=swg24026110
- 20110112 SECURITY ADVISORY IBM Cognos 8 Business Intelligence 8.4.1 mailing-list
- 70485 vdb-entry