Skip to content
OpenAdvisories
Medium · 5.4 CVE-2021-39079 EUVD-2021-25516GHSA-8wx2-v65v-5x9x

IBM Cognos Analytics Mobile for Android applications prior to version 1.1.14 is vulnerable to cross-site scripting. This vulnerability allo…

Published Feb 14, 2022 · Updated Sep 16, 2024 · Assigned by ibm

Vendor: IBM Product: Cognos Analytics Mobile

Description

IBM Cognos Analytics Mobile for Android applications prior to version 1.1.14 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 215592.

Affected products

VendorProductAffectedFixed
IBM Cognos Analytics Mobile 1.1 —

References