Cross-Site Scripting Vulnerability in IBM Cognos Business Intelligence
CVE-2014-0861

Currently unrated

Key Information:

Vendor

IBM
Status
Cognos Business Intelligence
Vendor
CVE Published:
22 February 2014

What is CVE-2014-0861?

The vulnerability in IBM Cognos Business Intelligence allows remote attackers to exploit cross-site scripting (XSS) via an unspecified parameter that fails to be properly sanitized when the user navigates using the Back button. This mismanagement of parameters enables attackers to inject arbitrary web scripts or HTML, potentially compromising user sessions and facilitating further attacks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://www-01.ibm.com/support/docview.wss?uid=swg21662856
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.