CVE-2022-39160 in Cognos Analyticsinformation

Résumé

par MITRE • 20/12/2022

IBM Cognos Analytics 11.2.1, 11.2.0, and 11.1.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 235064.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsable

IBM Corporation

Réserver

01/09/2022

Divulgation

20/12/2022

Modérer

accepté

Entrée

VDB-216338

CPE

prêt

EPSS

0.00392

KEV

non

Activités

très faible

Secteur

Finance, Pharma, ...

Sources

MITREhttps://www.cve.org/CVERecord?id=CVE-2022-39160
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2022-39160
CVE Detailshttps://www.cvedetails.com/cve/CVE-2022-39160/

◂ PrécédentAperçuSuivant ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!