Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:tivoli_common_reporting:3.1.0.1:*:*:*:*:*:*:*

part: a version: 3.1.0.1 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductTivoli Common Reporting (56c1902d-77d5-5b0b-9279-8bbebec7193f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-7450 vulnerable 2026-06-08 05:07:01.055094 Details available
Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the InvokerTransformer class in the Apache Commons Collections library.
Published: 2016-01-02T21:00:00.000Z
Updated: 2025-10-21T23:55:56.246Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7436 vulnerable 2026-06-08 05:07:00.884786 Details available
IBM Tivoli Common Reporting (TCR) 2.1 before IF14, 2.1.1 before IF22, 2.1.1.2 before IF9, 3.1.0.0 through 3.1.2 as used in Cognos Business Intelligence before 10.2 IF16, and 3.1.2.1 as used in Cognos Business Intelligence before 10.2.1.1 IF12 preserves user permissions across group-add and group-remove operations, which allows local users to bypass intended access restrictions in opportunistic circumstances by leveraging administrative changes to group membership.
Published: 2016-01-02T21:00:00.000Z
Updated: 2024-08-06T07:51:27.405Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7435 vulnerable 2026-06-08 05:07:00.882835 Details available
IBM Tivoli Common Reporting (TCR) 2.1 before IF14, 2.1.1 before IF22, 2.1.1.2 before IF9, 3.1.0.0 through 3.1.2 as used in Cognos Business Intelligence before 10.2 IF16, and 3.1.2.1 as used in Cognos Business Intelligence before 10.2.1.1 IF12 allows local users to bypass the Cognos Application Firewall (CAF) protection mechanism via leading whitespace in the BackURL field.
Published: 2016-01-02T21:00:00.000Z
Updated: 2024-08-06T07:51:27.268Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1969 vulnerable 2026-06-08 05:06:27.003766 Details available
Cross-site scripting (XSS) vulnerability in IBM Tivoli Common Reporting (TCR) 2.1 before IF13 and 2.1.1 before IF21, and TCR 3.1.x as used in Cognos Business Intelligence before 10.2 IF0015 and other products, allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
Published: 2015-10-04T01:00:00.000Z
Updated: 2024-08-06T05:02:43.365Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.