IBM Cognos Controller 10.2.0

CPE Details

IBM Cognos Controller 10.2.0
ibm
cognos_controller
10.2.0
2019-12-09
15h00 +00:00
2019-12-09
15h00 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:ibm:cognos_controller:10.2.0:*:*:*:*:*:*:*

Informations

Vendor

ibm

Product

cognos_controller

Version

10.2.0

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2019-4177 2019-06-17 15h10 +00:00 IBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1, and 10.4.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 158882.
3.3
Bas
CVE-2019-4176 2019-06-17 15h10 +00:00 IBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1, and 10.4.0 could allow a remote attacker to bypass security restrictions, caused by an error related to insecure HTTP Methods. An attacker could exploit this vulnerability to gain access to the system. IBM X-Force ID: 158881.
5.3
Moyen
CVE-2019-4174 2019-06-17 15h10 +00:00 IBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1, and 10.4.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 158879.
3.3
Bas
CVE-2019-4173 2019-06-17 15h10 +00:00 IBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1, and 10.4.0 could allow a remote attacker to obtain sensitive information, caused by a flaw in the HTTP OPTIONS method, aka Optionsbleed. By sending an OPTIONS HTTP request, a remote attacker could exploit this vulnerability to read secret data from process memory and obtain sensitive information. IBM X-Force ID: 158878.
6.5
Moyen
CVE-2019-4136 2019-06-17 15h10 +00:00 IBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1, and 10.4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 158332.
5.4
Moyen