CVE

Id
48398  
CVE No.
CVE-2011-0486  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in cognos.cgi in IBM Cognos 8 Business Intelligence (BI) 8.4.1 before FP1 allows remote attackers to inject arbitrary web script or HTML via the pathinfo parameter.  
Phase
Assigned (20110118)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
525600 48398 CVE-2011-0486 BUGTRAQ:20110112 SECURITY ADVISORY IBM Cognos 8 Business Intelligence 8.4.1  View
525601 48398 CVE-2011-0486 URL:http://www.securityfocus.com/archive/1/archive/1/515643/100/0/threaded  View
525602 48398 CVE-2011-0486 MISC:http://www-01.ibm.com/support/docview.wss?uid=swg24026110  View
525603 48398 CVE-2011-0486 BID:45781  View
525604 48398 CVE-2011-0486 URL:http://www.securityfocus.com/bid/45781  View
525605 48398 CVE-2011-0486 OSVDB:70485  View
525606 48398 CVE-2011-0486 URL:http://osvdb.org/70485  View
525607 48398 CVE-2011-0486 SECTRACK:1024954  View
525608 48398 CVE-2011-0486 URL:http://securitytracker.com/id?1024954  View
525609 48398 CVE-2011-0486 VUPEN:ADV-2011-0090  View
525610 48398 CVE-2011-0486 URL:http://www.vupen.com/english/advisories/2011/0090  View
525611 48398 CVE-2011-0486 XF:ibm-cognos-pathinfo-xss(64660)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
33893 JVNDB-2011-004135 Tor の tor_realloc 関数におけるサービス運用妨害 (DoS) の脆弱性 Tor の tor_realloc 関数は、メモリ割り当ての間に特定のサイズ値を検証しないため、サービス運用妨害 (デーモンクラッシュ) 状態となる脆弱性が存在します。 CVE-2011-0491 48398 5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004135.html  View