Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in the Web component in IBM Cognos TM1 before 9.5.2 FP3 and 10.1 before 10.1 FP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IBM Cognos TM1 Web组件跨站脚本漏洞
Vulnerability Description
IBM Cognos TM1中小企业群市场版本是一套一体化的业务分析解决方案，用以有效管理并提升财务绩效。 IBM Cognos TM1 9.4.1和之前版本，9.5.0至9.5.2版本以及10.1.0版本中存在跨站脚本漏洞，该漏洞源于某些未明输入传送到IBM Cognos TM1网络组建返回给用户之前，程序没有正确验证。攻击者利用该漏洞在受影响站点上下文中用户浏览器会话中执行任意HTML和脚本代码。
CVSS Information
N/A
Vulnerability Type
N/A