CVE-2012-4858

Published: Mar 5, 2013Modified: Apr 29, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

IBM Cognos Business Intelligence (BI) 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 does not properly validate Java serialized input, which allows remote attackers to execute arbitrary commands via unspecified vectors.

Affected (4)

Products: Ibm: Cognos Business Intelligence

Ibm

1 product

Cognos Business Intelligence

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Ibm Cognos Business Intelligence	Version 10.1.1
Ibm Cognos Business Intelligence	Version 10.1
Ibm Cognos Business Intelligence	Version 10.2
Ibm Cognos Business Intelligence	Version 8.4.1