CVE-2016-3038

CVE-2016-3038: vulnerability in IBM Corporation Cognos TM1

Published · Updated

Follow this CVE+ Monitor Cognos TM1

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.5%
IBM Cognos TM1 10.1 and 10.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 114614.
Affected products
IBM Corporation · Cognos TM1
Related CVEs — IBM Corporation Cognos TM1

In the same product, most dangerous first.

CVE-2016-3036—CVE-2016-3036EPSS 1.7%CVE-2016-3037—CVE-2016-3037EPSS 0.9%