CVE-2017-1486

IBM Cognos Business Intelligence 10.2, 10.2.1, 10.2.1.1, and 10.2.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 128624.

• CWE-79

• http://www.ibm.com/support/docview.wss?uid=swg22014202Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/128624VDB Entry, Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=swg22014202Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/128624VDB Entry, Vendor Advisory

Published

Apr 23, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-14853The Orpak SiteOmat OrCU component is vulnerable to code inje…8.6
• CVE-2017-14854A stack buffer overflow exists in one of the Orpak SiteOmat …9.1
• CVE-2017-14855Red Lion HMI panels allow remote attackers to cause a denial…
• CVE-2017-14857In Exiv2 0.26, there is an invalid free in the Image class i…
• CVE-2017-14858There is a heap-based buffer overflow in the Exiv2::l2Data f…
• CVE-2017-14859An Invalid memory address dereference was discovered in Exiv…5.5
• CVE-2017-14860There is a heap-based buffer over-read in the Exiv2::Jp2Imag…
• CVE-2017-14861There is a stack consumption vulnerability in the Exiv2::Int…
• CVE-2017-14862An Invalid memory address dereference was discovered in Exiv…5.5
• CVE-2017-14863A NULL pointer dereference was discovered in Exiv2::Image::p…
• CVE-2017-14864An Invalid memory address dereference was discovered in Exiv…5.5
• CVE-2017-14865There is a heap-based buffer overflow in the Exiv2::us2Data …