CVE-2023-43051

Description

IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 267451.

PUBLISHED Reserved 2023-09-15 | Published 2024-02-24 | Updated 2025-02-13 | Assigner ibm

Problem types

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Product status

References

www.ibm.com/support/pages/node/7123154 vendor-advisory

exchange.xforce.ibmcloud.com/vulnerabilities/267451 vdb-entry

security.netapp.com/advisory/ntap-20240322-0008/

security.netapp.com/advisory/ntap-20240621-0006/

cve.org (CVE-2023-43051)

nvd.nist.gov (CVE-2023-43051)

Download JSON