Description (CNA)
IBM Cognos Controller 11.0.0 through 11.1.0 is vulnerable to a Client-Side Desync (CSD) attack where an attacker could exploit a desynchronized browser connection that could lead to further cross-site scripting (XSS) attacks.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| IBM / Cognos Controller | affected 11.0.0 through 11.0.1 |
| IBM / Controller | affected 11.1.0 |
CWE
CWE-444
References
ADP enrichment
No English description supplied.
No references supplied.