VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 5, 2013· Updated Apr 29, 2026

CVE-2012-2177

CVE-2012-2177

Description

Cross-site scripting (XSS) vulnerability in IBM Cognos Business Intelligence (BI) 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 allows user-assisted remote attackers to inject arbitrary web script or HTML via vectors related to the search feature.

Affected products

4
  • IBM/Cognos Business Intelligence4 versions
    cpe:2.3:a:ibm:cognos_business_intelligence:10.1:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:ibm:cognos_business_intelligence:10.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:cognos_business_intelligence:10.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:cognos_business_intelligence:10.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:cognos_business_intelligence:8.4.1:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

3

News mentions

0

No linked articles in our index yet.