Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:cognos_business_intelligence:8.4.1:*:*:*:*:*:*:*

part: a version: 8.4.1 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductCognos Business Intelligence (78af0a88-c28c-53c2-a831-04a09cef12c3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-0861 vulnerable 2026-06-08 05:05:14.753459 Details available
Cross-site scripting (XSS) vulnerability in the server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1 before IF6, 10.1.1 before IF5, 10.2 before IF7, 10.2.1 before IF4, and 10.2.1.1 before IF4 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter that is not properly handled during use of the Back button.
Published: 2014-02-22T21:00:00.000Z
Updated: 2024-08-06T09:27:20.170Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0854 vulnerable 2026-06-08 05:05:14.731825 Details available
The server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1 before IF6, 10.1.1 before IF5, 10.2 before IF7, 10.2.1 before IF4, and 10.2.1.1 before IF4 allows remote authenticated users to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Published: 2014-02-22T21:00:00.000Z
Updated: 2024-08-06T09:27:20.225Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6732 vulnerable 2026-06-08 05:05:06.792588 Details available
Cross-site scripting (XSS) vulnerability in the server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1 before IF6, 10.1.1 before IF5, 10.2 before IF7, 10.2.1 before IF4, and 10.2.1.1 before IF4 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter.
Published: 2014-02-22T21:00:00.000Z
Updated: 2024-08-06T17:46:22.832Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4034 vulnerable 2026-06-08 05:04:33.629778 Details available
IBM Cognos Business Intelligence 8.4.1 before IF3, 10.1.0 before IF4, 10.1.1 before IF4, 10.2.0 before IF4, 10.2.1 before IF2, and 10.2.1.1 before IF1 allows remote authenticated users to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Published: 2013-11-16T02:00:00.000Z
Updated: 2024-08-06T16:30:49.757Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3030 vulnerable 2026-06-08 05:04:29.903296 Details available
The servlet gateway in IBM Cognos Business Intelligence 8.4.1 before IF3, 10.1.0 before IF4, 10.1.1 before IF4, 10.2.0 before IF4, 10.2.1 before IF2, and 10.2.1.1 before IF1 allows remote attackers to cause a denial of service (temporary gateway outage) via crafted HTTP requests.
Published: 2013-11-16T02:00:00.000Z
Updated: 2024-08-06T16:00:08.359Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2988 vulnerable 2026-06-08 05:04:29.748868 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2978 vulnerable 2026-06-08 05:04:29.735658 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0586 vulnerable 2026-06-08 05:03:48.685237 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4858 vulnerable 2026-06-08 05:02:53.028166 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4847 vulnerable 2026-06-08 05:02:52.933432 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4840 vulnerable 2026-06-08 05:02:52.920961 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4837 vulnerable 2026-06-08 05:02:52.904718 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4836 vulnerable 2026-06-08 05:02:52.904243 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4835 vulnerable 2026-06-08 05:02:52.901044 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2193 vulnerable 2026-06-08 05:00:53.273914 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2177 vulnerable 2026-06-08 05:00:53.189875 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.