Cognos Tm1
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:cognos_tm1:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Cognos Tm1 (3f5923c1-7f15-5c4b-aed1-971552a4f77d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-1506 |
vulnerable | 2026-06-08 05:09:22.488363 |
Details available
IBM Cognos TM1 10.2 and 10.2.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 129617.
Published: 2018-01-26T21:00:00.000Z
Updated: 2024-09-17T03:12:53.743Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-0381 |
vulnerable | 2026-06-08 05:07:15.164073 |
Details available
IBM Cognos TM1 10.2.2 before FP5, when the host/pmhub/pm/admin AdminGroups setting is empty, allows remote authenticated users to cause a denial of service (configuration outage) via a non-empty value.
Published: 2016-05-15T01:00:00.000Z
Updated: 2024-08-05T22:15:24.315Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-6350 |
vulnerable | 2026-06-08 05:02:59.993868 |
Details available
Cross-site scripting (XSS) vulnerability in the Web component in IBM Cognos TM1 before 9.5.2 FP3 and 10.1 before 10.1 FP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2013-01-31T11:00:00.000Z
Updated: 2024-08-06T21:28:39.475Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-0696 |
vulnerable | 2026-06-08 05:00:44.516678 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in the Executive Viewer (EV) in IBM Cognos TM1 before 9.5 FP1 allow remote attackers to inject arbitrary web script or HTML via unspecified requests to (1) aspnet_client or (2) evserver/createcontrol.js.
Published: 2012-01-13T02:00:00.000Z
Updated: 2024-08-06T18:30:53.999Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.