CVE-2016-0346: IBM Cognos Business Intelligence

Medium severity, CVSS 5.4. EPSS: 1.1% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in IBM Cognos Business Intelligence 10.2 before IF20, 10.2.1 before IF17, 10.2.1.1 before IF16, 10.2.2 before IF12, and 10.1.1 before IF19 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

Affected products

• IBM Cognos Business Intelligence: version 10.1.1 only; version 10.2 only; version 10.2.1 only; version 10.2.1.1 only; version 10.2.2 only

Published 2016-07-03. Last modified 2026-06-17.