CVE-2016-0217

Description

IBM Cognos Business Intelligence and IBM Cognos Analytics are vulnerable to stored cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to inject malicious script into a Web page which would be executed in a victims Web browser within the security context of the hosting Web site, once the page is viewed. An attacker could use this vulnerability to steal the victims cookie-based authentication credentials.

Risk Information

Base Score

5.4

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS Score

Exploitation Probability

0.158

Associated Vulnerability

Vulnerability	OS Platform
Multiple Vulnerabilities are affected in IBM Cognos Analytics 11.0.0	Windows
Multiple Vulnerabilities are affected in IBM Cognos Analytics 11.0.1	Windows
Multiple Vulnerabilities are affected in IBM Cognos Analytics 11.0.2	Windows
Multiple Vulnerabilities are affected in IBM Cognos Analytics 11.0.3	Windows
Multiple Vulnerabilities are affected in IBM Cognos Analytics 11.0.4	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234