IBM Tivoli Common Reporting 3.1.2

CPE Details

IBM Tivoli Common Reporting 3.1.2
ibm
tivoli_common_reporting
3.1.2
2016-01-07
13h25 +00:00
2016-01-07
13h25 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:ibm:tivoli_common_reporting:3.1.2:*:*:*:*:*:*:*

Informations

Vendor

ibm

Product

tivoli_common_reporting

Version

3.1.2

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2015-7450 2016-01-02 21h00 +00:00 Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the InvokerTransformer class in the Apache Commons Collections library.
9.8
Critique
CVE-2015-7435 2016-01-02 20h00 +00:00 IBM Tivoli Common Reporting (TCR) 2.1 before IF14, 2.1.1 before IF22, 2.1.1.2 before IF9, 3.1.0.0 through 3.1.2 as used in Cognos Business Intelligence before 10.2 IF16, and 3.1.2.1 as used in Cognos Business Intelligence before 10.2.1.1 IF12 allows local users to bypass the Cognos Application Firewall (CAF) protection mechanism via leading whitespace in the BackURL field.
2.5
Bas
CVE-2015-7436 2016-01-02 20h00 +00:00 IBM Tivoli Common Reporting (TCR) 2.1 before IF14, 2.1.1 before IF22, 2.1.1.2 before IF9, 3.1.0.0 through 3.1.2 as used in Cognos Business Intelligence before 10.2 IF16, and 3.1.2.1 as used in Cognos Business Intelligence before 10.2.1.1 IF12 preserves user permissions across group-add and group-remove operations, which allows local users to bypass intended access restrictions in opportunistic circumstances by leveraging administrative changes to group membership.
2.5
Bas
CVE-2015-1969 2015-10-03 23h00 +00:00 Cross-site scripting (XSS) vulnerability in IBM Tivoli Common Reporting (TCR) 2.1 before IF13 and 2.1.1 before IF21, and TCR 3.1.x as used in Cognos Business Intelligence before 10.2 IF0015 and other products, allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
3.5