The server in IBM Cognos Express 9.0 before IFIX 2, 9.5 before IFIX 2, 10.1 before IFIX 2, and 10.2.1 before FP1 allows remote attackers to read encrypted credentials via unspecified vectors.
Search vulnerabilities
CVE-2013-5444
CVSS 2.0 · 5.0 Medium
EPSS 1.7%
KEV · Not listed
Vendors
Products
CVE-2013-5443
Cross-site request forgery (CSRF) vulnerability in IBM Cognos Express 9.0 before IFIX 2, 9.5 before IFIX 2, 10.1 before IFIX 2, and 10.2.1 before FP1 allows remote attackers to hijack the authentication of arbitrary users.
CVSS 2.0 · 6.8 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2013-5445
IBM Cognos Express 9.0 before IFIX 2, 9.5 before IFIX 2, 10.1 before IFIX 2, and 10.2.1 before FP1 allows local users to obtain sensitive cleartext information by leveraging knowledge of a static decryption key.
CVSS 2.0 · 5.0 Medium
EPSS 1.2%
KEV · Not listed
Vendors
Products
CVE-2010-0557
IBM Cognos Express 9.0 allows attackers to obtain unspecified access to the Tomcat Manager component, and cause a denial of service, by leveraging hardcoded credentials.
CVSS 2.0 · 7.5 High
EPSS 51.7%
KEV · Not listed
Vendors
Products
Page 1 of 1.