Beveiligingsadvies

CVE-2025-36126

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-26 15:52:49

Laatst bijgewerkt 2026-05-27 17:20:14

Toegewezen door ibm

CVSS-score 6.4

Status PUBLISHED

Beschrijving

IBM Cognos Analytics 11.2.0, 12.0, and 12.1.0 and IBM Cognos Transformer 12.0, 11.2.4, and 12.1.0 is vulnerable to stored cross-site scripting (XSS) in Cognos Adminstration. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

← Alle CVE's bekijken Bekijk op cve.org ↗