Approved changes feed: RSS · Atom

cpe:2.3:a:ibm_corporation:cognos_tm1:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIbm Corporation (d12a6641-f3f1-52ca-aee3-0e264bbe9c89)
ProductCognos Tm1 (dff39320-453a-530c-8148-6e75660afdee)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-3038 vulnerable 2026-06-08 05:07:44.127000 Details available
IBM Cognos TM1 10.1 and 10.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 114614.
Published: 2017-04-17T21:00:00.000Z
Updated: 2024-08-05T23:40:15.084Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3037 vulnerable 2026-06-08 05:07:44.126503 Details available
IBM Cognos TM1 10.1 and 10.2 provides a service to return the victim's password with a valid session key. An authenticated attacker with user interaction could obtain this sensitive information. IBM X-Force ID: 114613.
Published: 2017-04-17T21:00:00.000Z
Updated: 2024-08-05T23:40:15.153Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3036 vulnerable 2026-06-08 05:07:44.124120 Details available
IBM Cognos TM1 10.1 and 10.2 is vulnerable to a denial of service, caused by a stack-based buffer overflow when parsing packets. A remote attacker could exploit this vulnerability to cause a denial of service. IBM X-Force ID: 114612.
Published: 2017-04-17T21:00:00.000Z
Updated: 2024-08-05T23:40:15.159Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.