Description
IBM Cognos Analytics 11.2.0 through 12.2.4 Fix Pack 5 and 12.0.0 through 12.0.4 is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | Cognos Analytics | 11.2.0 – ≤ 11.2.4 FP5, 12.0.0 – ≤ 12.0.4 | — |
References
- https://www.ibm.com/support/pages/node/7238163 vendor-advisory patch