Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2015-7435
Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
IBM Tivoli Common Reporting (TCR) 2.1 before IF14, 2.1.1 before IF22, 2.1.1.2 before IF9, 3.1.0.0 through 3.1.2 as used in Cognos Business Intelligence before 10.2 IF16, and 3.1.2.1 as used in Cognos Business Intelligence before 10.2.1.1 IF12 allows local users to bypass the Cognos Application Firewall (CAF) protection mechanism via leading whitespace in the BackURL field.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
IBM Cognos Business Intelligence Tivoli Common Reporting 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
IBM Cognos Business Intelligence(BI)和IBM Tivoli Common Reporting(TCR)都是美国IBM公司的产品。BI是一套商业智能软件。该软件包括报表、仪表板和记分卡等,并可通过分析关键因素与关键干系人等内容,协助企业调整决策。TCR是一套基于Tivoli(轻量级目录访问协议LDAP身份基础架构)的通用报表解决方案。该方案提供定制报表、管理报表和生成报表等功能。 IBM Cognos BI中使用的IBM TCR中存在安全漏洞。本地攻击者可借助BackUR
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
VendorProductAffected VersionsCPESubscribe
-n/a n/a -
II. Public POCs for CVE-2015-7435
#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC
III. Intelligence Information for CVE-2015-7435
Please Login to view more intelligence information
IV. Related Vulnerabilities
V. Comments for CVE-2015-7435

No comments yet


Leave a comment