CVE-2015-1969

Currently unrated

Key Information:

Vendor
IBM
Status
Tivoli Common Reporting
Vendor
CVE Published:
4 October 2015

Summary

Cross-site scripting (XSS) vulnerability in IBM Tivoli Common Reporting (TCR) 2.1 before IF13 and 2.1.1 before IF21, and TCR 3.1.x as used in Cognos Business Intelligence before 10.2 IF0015 and other products, allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

References

http://www.securityfocus.com/bid/76472
vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1034050
vdb-entryx_refsource_SECTRACK
http://www-01.ibm.com/support/docview.wss?uid=swg21967384
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.