PT-2013-4770 · Ibm+1 · Ibm Cognos Command Center+1

Publicado 2013-07-24 · Atualizado 2017-08-29 · CVE-2013-3979

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Baixa

Vetor base

AV:N/AC:M/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions IBM Cognos Command Center versions prior to 10.1

Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities in the help pages of the Web Client. These vulnerabilities allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors when using Internet Explorer.

Recommendations For versions prior to 10.1, update to version 10.1 or later to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2013-3979

Produtos afetados

Ibm Cognos Command Center

Internet Explorer

Referências · 6

• http://securitytracker.com/id/1028829 · Nota
• http://secunia.com/advisories/54286 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/84904 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-3979 · Nota de Segurança
• http://www-01.ibm.com/support/docview.wss?uid=swg21643067 · Aviso do Fabricante
• http://securityfocus.com/bid/61419 · Nota