CVE-2017-1506

IBM Cognos TM1 10.2 and 10.2.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 129617.

• CWE-79

• http://www.ibm.com/support/docview.wss?uid=swg22012623Patch, Vendor Advisory
• http://www.securityfocus.com/bid/102892Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040302Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/129617VDB Entry, Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=swg22012623Patch, Vendor Advisory
• http://www.securityfocus.com/bid/102892Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040302Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/129617VDB Entry, Vendor Advisory

Published

Jan 26, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-15051Multiple stored cross-site scripting (XSS) vulnerabilities i…
• CVE-2017-15052TeamPass before 2.1.27.9 does not properly enforce manager a…
• CVE-2017-15053TeamPass before 2.1.27.9 does not properly enforce manager a…
• CVE-2017-15054An arbitrary file upload vulnerability, present in TeamPass …
• CVE-2017-15055TeamPass before 2.1.27.9 does not properly enforce item acce…
• CVE-2017-15056p_lx_elf.cpp in UPX 3.94 mishandles ELF headers, which allow…
• CVE-2017-15063There are CSRF vulnerabilities in Subrion CMS 4.1.x through …
• CVE-2017-15064Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-15065Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-15066Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-15067Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-15068Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…