{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-06-10T13:11:15.638","vulnerabilities":[{"cve":{"id":"CVE-2016-0218","sourceIdentifier":"psirt@us.ibm.com","published":"2017-02-01T22:59:00.197","lastModified":"2026-05-13T00:24:29.033","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Cognos Business Intelligence and IBM Cognos Analytics are vulnerable to cross-site scripting, caused by improper validation of user-supplied input.  A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked.  An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials."},{"lang":"es","value":"IBM Cognos Business Intelligence e IBM Cognos Analytics son vulnerables a XSS, provocada por una validación inapropiada de la entrada suministrada por el usuario. Un atacante remoto podría explotar esta vulnerabilidad usando una URL especialmente manipulada para ejecutar una secuencia de comandos en el navegador web de la victima dentro del contexto de seguridad del sitio web de alojamiento, una vez que se hace clic en la URL. Un atacante podría utilizar esta vulnerabilidad para robar credenciales de autenticación basadas en las cookies de la victima."}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:cognos_business_intelligence:10.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B00BAD84-4BB6-41ED-835E-86AB150716D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:cognos_business_intelligence:10.2:*:*:*:*:*:*:*","matchCriteriaId":"6588FEE1-5A6F-4ED6-998A-B8CF54954F5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:cognos_business_intelligence:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FDA8132D-A09E-4D4C-9A5D-D708010CCFFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:cognos_business_intelligence:10.2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"7CCBB0AE-ECD1-4192-B1BB-18439A4CF7B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:cognos_business_intelligence:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"4A2AA637-B4F6-4C44-BC71-B9C6B06BA670"}]}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21996417","source":"psirt@us.ibm.com"},{"url":"http://www.securityfocus.com/bid/95456","source":"psirt@us.ibm.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21995691","source":"nvd@nist.gov","tags":["Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21996417","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/95456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}}]}