← back
CVE-2018-1413

CVE-2018-1413

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.1%
exploitation probability
1.1%top 36% of all CVEs
observed exploitation
nono source reports it
IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 138819.
Affected products
IBM · Cognos Analytics
References
https://exchange.xforce.ibmcloud.com/vulnerabilities/138819https://security.netapp.com/advisory/ntap-20190329-0003/https://security.netapp.com/advisory/ntap-20190401-0003/http://www.ibm.com/support/docview.wss?uid=swg22016039http://www.securityfocus.com/bid/104117http://www.securitytracker.com/id/1040889