XSS in Ibm Tivoli_common_reporting
CVE-2015-1969
Cross-site scripting (XSS) vulnerability in IBM Tivoli Common Reporting (TCR) 2.1 before IF13 and 2.1.1 before IF21, and TCR 3.1.x as used in Cognos Business Intelligence before 10.2 IF0015 and other products, allows remote authenticated u…
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.015 (70.7th percentile) — read the EPSS interpretation.
Affected products
- Ibm Tivoli_common_reporting — versions 2.1.0.0, 2.1.1.0, 3.1.0.0
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@us.ibm.com (vdb-entry, x_refsource_BID)
- psirt@us.ibm.com (vdb-entry, x_refsource_SECTRACK)
- psirt@us.ibm.com (x_refsource_CONFIRM, Patch, Vendor Advisory)