CVE-2017-1428

Published: Aug 29, 2017Modified: May 13, 2026

6.1

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

IBM Cognos Analytics 11.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 127583.

Affected (7)

Products: Ibm: Cognos Analytics

1 product

Cognos Analytics

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Ibm Cognos Analytics	Version 11.0.0
Ibm Cognos Analytics	Version 11.0.1
Ibm Cognos Analytics	Version 11.0.2
Ibm Cognos Analytics	Version 11.0.3
Ibm Cognos Analytics	Version 11.0.4
Ibm Cognos Analytics	Version 11.0.5
Ibm Cognos Analytics	Version 11.0.6

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (8)

http://www.ibm.com/support/docview.wss?uid=swg22007242

Source: psirt@us.ibm.com

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/127583

Source: psirt@us.ibm.com

VDB EntryVendor Advisory

https://security.netapp.com/advisory/ntap-20190329-0003/

Source: psirt@us.ibm.com

https://security.netapp.com/advisory/ntap-20190401-0003/

Source: psirt@us.ibm.com

http://www.ibm.com/support/docview.wss?uid=swg22007242

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/127583

Source: af854a3a-2127-422b-91ae-364da2661108

VDB EntryVendor Advisory

https://security.netapp.com/advisory/ntap-20190329-0003/

Source: af854a3a-2127-422b-91ae-364da2661108

https://security.netapp.com/advisory/ntap-20190401-0003/

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.