Ibm · Ibm Cognos Analytics · CVE-2016-3032
**Name of the Vulnerable Software and Affected Versions**
IBM Cognos Analytics version 11.0
**Description**
The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session.
**Recommendations**
For IBM Cognos Analytics version 11.0, update to a version that includes a fix for this issue to prevent cross-site scripting attacks.