Ibm · Ibm Cognos Analytics · CVE-2019-4645
**Name of the Vulnerable Software and Affected Versions**
IBM Cognos Analytics versions 11.0 through 11.1
**Description**
The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session.
**Recommendations**
For versions 11.0 and 11.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.