CVE-2012-4858 in Cognos Business Intelligence

摘要

由 VulDB • 2026-07-06

IBM Cognos Business Intelligence (BI) 8.4.1 in versione precedente a IF1, 10.1 in versione precedente a IF2, 10.1.1 in versione precedente a IF2 e 10.2 in versione precedente a IF1 non convalida correttamente l'input serializzato Java, consentendo agli attaccanti remoti di eseguire comandi arbitrari tramite vettori non specificati.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• 预定: 2012-09-06
• 披露: 2013-03-05
• 管理: 已接受
• 条目: VDB-63681
• CPE: 准备好
• CWE: CWE-20 (已确认)
• CVSS: 9.8 (VulDB)
• EPSS: 0.03867
• KEV: 否
• 活动: 非常低
• 部门: Insurance, Energy, ...

来源

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-4858
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-4858
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-4858/