Unscored CVE-2012-4837 EUVD-2012-4762GHSA-65gp-cjj6-w8mh

IBM Cognos Business Intelligence (BI) 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 allows remote authenticated…

Published Mar 2, 2013 · Updated Aug 6, 2024 · Assigned by ibm

Description

IBM Cognos Business Intelligence (BI) 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 allows remote authenticated users to conduct XPath injection attacks, and read arbitrary XML files, via unspecified vectors.

References

http://www-01.ibm.com/support/docview.wss?uid=swg24034373
cognos-bi-xpath-injection(78919) vdb-entry
http://www-01.ibm.com/support/docview.wss?uid=swg21626697