Cognos 8 Business Intelligence

DATE	CVE	VULNERABILITY TITLE	RISK
2011-01-18	CVE-2011-0486	Cross-Site Scripting vulnerability in IBM Cognos 8 Business Intelligence 8.4.1 Cross-site scripting (XSS) vulnerability in cognos.cgi in IBM Cognos 8 Business Intelligence (BI) 8.4.1 before FP1 allows remote attackers to inject arbitrary web script or HTML via the pathinfo parameter. network ibm CWE-79	4.3
2010-04-21	CVE-2010-1490	Security vulnerability in IBM Cognos 8 Business Intelligence Unspecified vulnerability in IBM Cognos 8 Business Intelligence before 8.4.1 FP1 has unknown impact and attack vectors. network low complexity ibm critical	10.0