CVE-2014-0861

no score yetEPSS 1.1%

ibm cognos business intelligence: no CVSS score yet. EPSS 1.1% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1 before IF6, 10.1.1 before IF5, 10.2 before IF7, 10.2.1 before IF4, and 10.2.1.1 before IF4 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter that is not properly handled during use of the Back button.

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 65% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2014-02-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:cognos_business_intelligence

References

http://www-01.ibm.com/support/docview.wss?uid=swg21662856
http://www-01.ibm.com/support/docview.wss?uid=swg21662856

Check your stack JSON