Vulnerabilities > IBM > Cognos Business Intelligence > 10.1

DATE CVE VULNERABILITY TITLE RISK
2017-04-17 CVE-2016-3038 Cross-site Scripting vulnerability in IBM Cognos Business Intelligence 10.1/10.2/10.2.2
IBM Cognos TM1 10.1 and 10.2 is vulnerable to cross-site scripting.
network
low complexity
ibm CWE-79
5.4
2017-04-17 CVE-2016-3037 Information Exposure vulnerability in IBM Cognos Business Intelligence 10.1/10.2/10.2.2
IBM Cognos TM1 10.1 and 10.2 provides a service to return the victim's password with a valid session key.
network
low complexity
ibm CWE-200
5.7
2017-04-17 CVE-2016-3036 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in IBM Cognos Business Intelligence 10.1/10.2/10.2.2
IBM Cognos TM1 10.1 and 10.2 is vulnerable to a denial of service, caused by a stack-based buffer overflow when parsing packets.
network
low complexity
ibm CWE-119
7.5