ID |
CVE-2016-3038
|
Sažetak |
IBM Cognos TM1 10.1 and 10.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 114614. |
Reference |
|
CVSS |
Base: | 3.5 |
Impact: | 2.9 |
Exploitability: | 6.8 |
|
Pristup |
Vektor | Složenost | Autentikacija |
NETWORK |
MEDIUM |
SINGLE |
|
Impact |
Povjerljivost | Cjelovitost | Dostupnost |
NONE |
PARTIAL |
NONE |
|
CVSS vektor |
AV:N/AC:M/Au:S/C:N/I:P/A:N |
Zadnje važnije ažuriranje |
21-04-2017 - 14:44 |
Objavljeno |
17-04-2017 - 21:59 |