CVE-2017-1535

IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 130677.

• CWE-79

• http://www.ibm.com/support/docview.wss?uid=swg22007242Patch, Vendor Advisory
• http://www.securityfocus.com/bid/100834
• https://exchange.xforce.ibmcloud.com/vulnerabilities/130677VDB Entry, Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=swg22007242Patch, Vendor Advisory
• http://www.securityfocus.com/bid/100834
• https://exchange.xforce.ibmcloud.com/vulnerabilities/130677VDB Entry, Vendor Advisory

Published

Aug 29, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-15344Huawei AR3200 with software V200R006C10, V200R006C11, V200R0…
• CVE-2017-15345Huawei Smartphones with software LON-L29DC721B186 have a den…
• CVE-2017-15346XML parser in Huawei S12700 V200R005C00,S1700 V200R009C00, V…
• CVE-2017-15347Huawei Mate 9 Pro mobile phones with software of versions ea…
• CVE-2017-15348Huawei IPS Module V500R001C00, NGFW Module V500R001C00, NIP6…
• CVE-2017-15349Huawei CloudEngine 12800 V100R003C00, V100R005C00, V100R005C…
• CVE-2017-15350The Common Open Policy Service Protocol (COPS) module in Hua…
• CVE-2017-15351The 'Find Phone' function in Huawei Honor V9 play smart phon…
• CVE-2017-15352Huawei OceanStor 2800 V3, V300R003C00, V300R003C20, OceanSto…
• CVE-2017-15353Huawei DP300, V500R002C00, RP200, V500R002C00, V600R006C00, …
• CVE-2017-15354Huawei DP300, V500R002C00, RP200, V600R006C00, TE30, V100R00…
• CVE-2017-15355Huawei DP300, V500R002C00, RP200, V600R006C00, TE30, V100R00…