Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:tivoli_common_reporting:2.1.1.2:*:*:*:*:*:*:*

part: a version: 2.1.1.2 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductTivoli Common Reporting (56c1902d-77d5-5b0b-9279-8bbebec7193f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-7450 vulnerable 2026-06-08 05:07:01.055057 Details available
Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the InvokerTransformer class in the Apache Commons Collections library.
Published: 2016-01-02T21:00:00.000Z
Updated: 2025-10-21T23:55:56.246Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7436 vulnerable 2026-06-08 05:07:00.884749 Details available
IBM Tivoli Common Reporting (TCR) 2.1 before IF14, 2.1.1 before IF22, 2.1.1.2 before IF9, 3.1.0.0 through 3.1.2 as used in Cognos Business Intelligence before 10.2 IF16, and 3.1.2.1 as used in Cognos Business Intelligence before 10.2.1.1 IF12 preserves user permissions across group-add and group-remove operations, which allows local users to bypass intended access restrictions in opportunistic circumstances by leveraging administrative changes to group membership.
Published: 2016-01-02T21:00:00.000Z
Updated: 2024-08-06T07:51:27.405Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7435 vulnerable 2026-06-08 05:07:00.881829 Details available
IBM Tivoli Common Reporting (TCR) 2.1 before IF14, 2.1.1 before IF22, 2.1.1.2 before IF9, 3.1.0.0 through 3.1.2 as used in Cognos Business Intelligence before 10.2 IF16, and 3.1.2.1 as used in Cognos Business Intelligence before 10.2.1.1 IF12 allows local users to bypass the Cognos Application Firewall (CAF) protection mechanism via leading whitespace in the BackURL field.
Published: 2016-01-02T21:00:00.000Z
Updated: 2024-08-06T07:51:27.268Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.