Yüksek CVSS 8.2
CVE-2025-3633: Cognos Analytics: siteler arası betik çalıştırma (XSS)
Açıklama (NVD)
IBM Cognos Analytics 11.2.0, 11.2.4, 12.0, and 12.1.0 and IBM Cognos Transformer 11.2.4, 12.0, and 12.1.0 are vulnerable to cross-site scripting (XSS). This vulnerability allows a remote attacker to inject arbitrary JavaScript code into the web user interface, which may alter the intended functionality and could lead to the disclosure of credentials within a trusted session.
Özet bilgiler
- Ürün
- Ibm Cognos Analytics
- CVSS v3.1
- 8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N - EPSS
- %0,31 (yüzdelik 24)
- CWE
- CWE-79
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| ibm-cognos-analytics | 11.2.0 | — | 11.2.4 |
| ibm-cognos-analytics | 12.0.0 | — | 12.0.4 |
| ibm-cognos-analytics | 12.1.0 | — | 12.1.2 |
| ibm-cognos-analytics | 11.2.4 | 11.2.4 | — |
| ibm-cognos-analytics | 11.2.4 | 11.2.4 | — |
| ibm-cognos-analytics | 11.2.4 | 11.2.4 | — |
| ibm-cognos-analytics | 11.2.4 | 11.2.4 | — |
| ibm-cognos-analytics | 11.2.4 | 11.2.4 | — |
| ibm-cognos-analytics | 11.2.4 | 11.2.4 | — |
| ibm-cognos-analytics | 11.2.4 | 11.2.4 | — |
| ibm-cognos-analytics | 11.2.4 | 11.2.4 | — |
| ibm-cognos-analytics | 11.2.4 | 11.2.4 | — |
| ibm-cognos-analytics | 11.2.4 | 11.2.4 | — |
| ibm-cognos-analytics | 11.2.4 | 11.2.4 | — |
| ibm-cognos-analytics | 11.2.4 | 11.2.4 | — |
| ibm-cognos-analytics | 12.0.4 | 12.0.4 | — |
| ibm-cognos-analytics | 12.0.4 | 12.0.4 | — |
| ibm-cognos-analytics | 12.0.4 | 12.0.4 | — |
| ibm-cognos-transformer | 11.2.4 | 11.2.4 | — |
| ibm-cognos-transformer | 12.0 | 12.0 | — |
| ibm-cognos-transformer | 12.1.0 | 12.1.0 | — |