| ID | CVE-2011-0486 | 
      
          | Sažetak | Cross-site scripting (XSS) vulnerability in cognos.cgi in IBM Cognos 8 Business Intelligence (BI) 8.4.1 before FP1 allows remote attackers to inject arbitrary web script or HTML via the pathinfo parameter. | 
      
          | Reference |  | 
      
        | CVSS | 
              | Base: | 4.3 |  | Impact: | 2.9 |  | Exploitability: | 8.6 |  | 
    
        | Pristup | 
            | Vektor | Složenost | Autentikacija |  
            | NETWORK | MEDIUM | NONE |  | 
      
        | Impact | 
            | Povjerljivost | Cjelovitost | Dostupnost |  
            | NONE | PARTIAL | NONE |  | 
    
        | CVSS vektor | AV:N/AC:M/Au:N/C:N/I:P/A:N | 
      
          | Zadnje važnije ažuriranje | 09-10-2018 - 19:29 | 
      
          | Objavljeno | 18-01-2011 - 18:03 |