Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:cognos_business_intelligence:10.1:*:*:*:*:*:*:*

part: a version: 10.1 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductCognos Business Intelligence (78af0a88-c28c-53c2-a831-04a09cef12c3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-3038 vulnerable 2026-06-08 05:07:44.127034 Details available
IBM Cognos TM1 10.1 and 10.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 114614.
Published: 2017-04-17T21:00:00.000Z
Updated: 2024-08-05T23:40:15.084Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3037 vulnerable 2026-06-08 05:07:44.126549 Details available
IBM Cognos TM1 10.1 and 10.2 provides a service to return the victim's password with a valid session key. An authenticated attacker with user interaction could obtain this sensitive information. IBM X-Force ID: 114613.
Published: 2017-04-17T21:00:00.000Z
Updated: 2024-08-05T23:40:15.153Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3036 vulnerable 2026-06-08 05:07:44.124819 Details available
IBM Cognos TM1 10.1 and 10.2 is vulnerable to a denial of service, caused by a stack-based buffer overflow when parsing packets. A remote attacker could exploit this vulnerability to cause a denial of service. IBM X-Force ID: 114612.
Published: 2017-04-17T21:00:00.000Z
Updated: 2024-08-05T23:40:15.159Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-6145 vulnerable 2026-06-08 05:05:56.531810 Details available
Cross-site scripting (XSS) vulnerability in the server in IBM Cognos Business Intelligence 10.1 before IF10, 10.1.1 before IF9, 10.2 before IF11, 10.2.1 before IF8, and 10.2.1.1 before IF7 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
Published: 2014-12-12T11:00:00.000Z
Updated: 2024-08-06T12:10:12.155Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0861 vulnerable 2026-06-08 05:05:14.753483 Details available
Cross-site scripting (XSS) vulnerability in the server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1 before IF6, 10.1.1 before IF5, 10.2 before IF7, 10.2.1 before IF4, and 10.2.1.1 before IF4 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter that is not properly handled during use of the Back button.
Published: 2014-02-22T21:00:00.000Z
Updated: 2024-08-06T09:27:20.170Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0854 vulnerable 2026-06-08 05:05:14.731848 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6732 vulnerable 2026-06-08 05:05:06.793181 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4034 vulnerable 2026-06-08 05:04:33.629803 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3030 vulnerable 2026-06-08 05:04:29.903322 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2988 vulnerable 2026-06-08 05:04:29.748888 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2978 vulnerable 2026-06-08 05:04:29.736238 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0586 vulnerable 2026-06-08 05:03:48.685961 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4858 vulnerable 2026-06-08 05:02:53.028190 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4840 vulnerable 2026-06-08 05:02:52.920993 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4837 vulnerable 2026-06-08 05:02:52.904746 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4836 vulnerable 2026-06-08 05:02:52.904275 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4835 vulnerable 2026-06-08 05:02:52.902093 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2193 vulnerable 2026-06-08 05:00:53.273936 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2177 vulnerable 2026-06-08 05:00:53.190641 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.