CVEvulnerability
CVE-2012-0696
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-01-13
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Executive Viewer (EV) in IBM Cognos TM1 before 9.5 FP1 allow remote attackers to inject arbitrary web script or HTML via unspecified requests to (1) aspnet_client or (2) evserver/createcontrol.js.
Affected configurations
• ibm cognos executive viewer
• ibm cognos tm1 (<= 9.4.1.3)
• ibm cognos tm1 9.4.0
• ibm cognos tm1 9.4.1
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/47487 Vendor Advisory
- http://securitytracker.com/id?1026491 securitytracker.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM26682 Vendor Advisory
- http://www.osvdb.org/78216 www.osvdb.org
- http://www.osvdb.org/78217 www.osvdb.org
- http://www.securityfocus.com/bid/51326 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72198 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/47487 Vendor Advisory
- http://securitytracker.com/id?1026491 securitytracker.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM26682 Vendor Advisory
- http://www.osvdb.org/78216 www.osvdb.org
- http://www.osvdb.org/78217 www.osvdb.org
- http://www.securityfocus.com/bid/51326 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72198 exchange.xforce.ibmcloud.com