CVE-2024-25041 Information

Description

IBM Cognos Analytics 11.2.0 11.2.1 11.2.2 11.2.3 11.2.4 12.0.0 12.0.1 and 12.0.2 is potentially vulnerable to cross site scripting (XSS). A remote attacker could execute malicious commands due to improper validation of column headings in Cognos Assistant. IBM X-Force ID: 282780.

Reference

https://www.ibm.com/support/pages/node/7156941 https://exchange.xforce.ibmcloud.com/vulnerabilities/282780