Unscored severity · published Oct 4, 2015
CVE-2015-1969
Cross-site scripting (XSS) vulnerability in IBM Tivoli Common Reporting (TCR) 2.1 before IF13 and 2.1.1 before IF21, and TCR 3.1.x as used in Cognos Business Intelligence before…
–
CVSS
1.5%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in IBM Tivoli Common Reporting (TCR) 2.1 before IF13 and 2.1.1 before IF21, and TCR 3.1.x as used in Cognos Business Intelligence before 10.2 IF0015 and other products, allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 73% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TC
Tivoli Common Reporting · Ibm
2.1.0.0; 2.1.1.0; 3.1.0.0; 3.1.0.1; 3.1.0.2; 3.1.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-1969
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-1969
Patch
http://www-01.ibm.com/support/docview.wss?uid=swg21967384
www.securityfocus.com
http://www.securityfocus.com/bid/76472
www.securitytracker.com
http://www.securitytracker.com/id/1034050
More from Tivoli Common Reporting
9.8
CVE-2015-7450
IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.
2.5
CVE-2015-7436
IBM Tivoli Common Reporting (TCR) 2.1 before IF14, 2.1.1 before IF22, 2.1.1.2 before IF9, 3.1.0.0 through 3.1.2 as used in Cognos Business Intelligence before 10.2 IF16, and…
2.5
CVE-2015-7435
IBM Tivoli Common Reporting (TCR) 2.1 before IF14, 2.1.1 before IF22, 2.1.1.2 before IF9, 3.1.0.0 through 3.1.2 as used in Cognos Business Intelligence before 10.2 IF16, and…
–
CVE-2011-0732
Multiple unspecified vulnerabilities in IBM Tivoli Integrated Portal (TIP) 1.1.1.1, as used in IBM Tivoli Common Reporting (TCR) 1.2.0 before Interim Fix 9, have unknown impact…