PT-2013-4770 · Ibm+1 · Ibm Cognos Command Center+1

Published 2013-07-24 · Updated 2017-08-29 · CVE-2013-3979

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Low

Base vector

AV:N/AC:M/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions IBM Cognos Command Center versions prior to 10.1

Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities in the help pages of the Web Client. These vulnerabilities allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors when using Internet Explorer.

Recommendations For versions prior to 10.1, update to version 10.1 or later to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2013-3979

Affected Products

Ibm Cognos Command Center

Internet Explorer

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2013-3979 · Security Note
• http://www-01.ibm.com/support/docview.wss?uid=swg21643067 · Vendor Advisory
• http://securitytracker.com/id/1028829 · Note
• http://secunia.com/advisories/54286 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/84904 · Note
• http://securityfocus.com/bid/61419 · Note