CT
Product
Cognos Tm1
9
CVEs
0
On KEV
6.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 2Low 0
Watch
Add Cognos Tm1 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-1506 | 6.1 | Jan 26 | IBM Cognos TM1 10.2 and 10.2.2 is vulnerable to cross-site scripting Affected: 10.2; 10.2.2 |
| CVE-2016-0381 | 4.3 | May 15 | IBM Cognos TM1 10.2.2 before FP5, when the host/pmhub/pm/admin AdminGroups setting is empty, allows remote authenticated users to cause a denial of service (configuration outage)… Affected: through 10.2.2 |
| CVE-2014-0877 | – | Sep 5 | IBM Cognos TM1 10.2.0.2 before IF1 and 10.2.2.0 before IF1 allows remote attackers to bypass intended access restrictions by visiting the Rights page and then following a… Affected: 10.2.0.2; 10.2.2.0 |
| CVE-2014-0863 | – | Sep 5 | The client in IBM Cognos TM1 9.5.2.3 before IF5, 10.1.1.2 before IF1, 10.2.0.2 before IF1, and 10.2.2.0 before IF1 stores obfuscated passwords in memory, which allows remote… Affected: 9.5.2.3; 10.1.1.2; 10.2.0.2; 10.2.2 |
| CVE-2013-0484 | – | Jun 19 | The server process in IBM Cognos TM1 10.1.x before 10.1.1 FP1 allows remote attackers to cause a denial of service (daemon crash) via an undocumented API call that triggers the… Affected: 10.1.0; 10.1.0.1; 10.1.1 |
| CVE-2012-6350 | – | Jan 31 | Cross-site scripting (XSS) vulnerability in the Web component in IBM Cognos TM1 before 9.5.2 FP3 and 10.1 before 10.1 FP1 allows remote attackers to inject arbitrary web script or… Affected: through 9.5.2; 9.4.1; 9.4.1.3; 9.5.0; 9.5.1; 10.1.0 |
| CVE-2012-0202 | – | May 4 | Multiple stack-based buffer overflows in tm1admsd.exe in the Admin Server in IBM Cognos TM1 9.4.x and 9.5.x before 9.5.2 FP2 allow remote attackers to cause a denial of service… Affected: 9.4.1; 9.4.1.3; 9.5.1; 9.5.2 |
| CVE-2012-1046 | – | Feb 10 | Cross-site scripting (XSS) vulnerability in TM1 Web in IBM Cognos TM1 9.5.2 FP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different… Affected: 9.5.2 |
| CVE-2012-0696 | – | Jan 13 | Multiple cross-site scripting (XSS) vulnerabilities in the Executive Viewer (EV) in IBM Cognos TM1 before 9.5 FP1 allow remote attackers to inject arbitrary web script or HTML via… Affected: through 9.4.1.3; 9.4.0; 9.4.1 |
Showing 9