IBM Cognos Command Center Unspecified Cross Site Scripting Vulnerability

IBM Cognos Command Center Unspecified Cross Site Scripting Vulnerability

IBM Cognos Command Center is prone to a cross-site scripting vulnerability because it fails to properly sanitize unspecified user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site and steal cookie-based authentication credentials.

IBM Cognos Command Center 10.1 is vulnerable; other versions may also be affected.