Skip to main content

Cognos Business Intelligence CVE-2012-4847

MEDIUM
Numeric Errors (CWE-189)
2012-11-14 psirt@us.ibm.com
Denial Of Service IBM Cognos Business Intelligence
4.0
CVSS 2.0 · NVD
Share

Severity by source

NVD PRIMARY
4.0 MEDIUM
AV:N/AC:L/Au:S/C:N/I:N/A:P

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:L/Au:S/C:N/I:N/A:P
Attack Vector
Network
Attack Complexity
Low
Confidentiality
None
Integrity
None
Availability
P

Lifecycle Timeline

1
CVE Published
Nov 14, 2012 - 12:30 cve.org
MEDIUM 4.0

DescriptionCVE.org

IBM Cognos Business Intelligence (BI) 8.4 and 8.4.1 allows remote authenticated users to cause a denial of service (CPU consumption) via a crafted request containing a zero-valued byte.

AnalysisAI

IBM Cognos Business Intelligence (BI) 8.4 and 8.4.1 allows remote authenticated users to cause a denial of service (CPU consumption) via a crafted request containing a zero-valued byte. Rated medium severity (CVSS 4.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-189. IBM Cognos Business Intelligence (BI) 8.4 and 8.4.1 allows remote authenticated users to cause a denial of service (CPU consumption) via a crafted request containing a zero-valued byte. Affected products include: Ibm Cognos Business Intelligence.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Cognos Business Intelligence

View all
CVE-2013-4034 MEDIUM POC
4.0 Nov 18

IBM Cognos Business Intelligence 8.4.1 before IF3, 10.1.0 before IF4, 10.1.1 before IF4, 10.2.0 before IF4, 10.2.1 befor
CVE-2012-4858 CRITICAL
9.3 Mar 05

IBM Cognos Business Intelligence (BI) 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 does not
CVE-2016-8960 HIGH
8.8 Mar 27

IBM Cognos Business Intelligence 10.2 could allow a user with lower privilege Capabilities to adopt the Capabilities of

CVE-2016-3036 HIGH
7.5 Apr 17

IBM Cognos TM1 10.1 and 10.2 is vulnerable to a denial of service, caused by a stack-based buffer overflow when parsing

CVE-2016-0254 MEDIUM
6.5 Jun 07

IBM Cognos Business Intelligence 10.1 and 10.2 is vulnerable to a denial of service, caused by an XML External Entity In
CVE-2016-3037 MEDIUM
5.7 Apr 17

IBM Cognos TM1 10.1 and 10.2 provides a service to return the victim's password with a valid session key. Rated medium s
CVE-2016-9985 MEDIUM
5.5 Mar 08

IBM Cognos Server 10.1.1 and 10.2 stores highly sensitive information in log files that could be read by a local user. R
CVE-2016-3038 MEDIUM
5.4 Apr 17

IBM Cognos TM1 10.1 and 10.2 is vulnerable to cross-site scripting. Rated medium severity (CVSS 5.4), this vulnerability
CVE-2016-0346 MEDIUM
5.4 Jul 03

Cross-site scripting (XSS) vulnerability in IBM Cognos Business Intelligence 10.2 before IF20, 10.2.1 before IF17, 10.2.
CVE-2016-0221 MEDIUM
5.4 Jul 03

Cross-site scripting (XSS) vulnerability in IBM Cognos TM1, as used in IBM Cognos Business Intelligence 10.2 before IF20
CVE-2016-0218 MEDIUM
5.4 Feb 01

IBM Cognos Business Intelligence and IBM Cognos Analytics are vulnerable to cross-site scripting, caused by improper val
CVE-2013-3030 MEDIUM
5.0 Nov 18

The servlet gateway in IBM Cognos Business Intelligence 8.4.1 before IF3, 10.1.0 before IF4, 10.1.1 before IF4, 10.2.0 b

Same weakness CWE-189 – Numeric Errors

View all
CVE-2013-2094 HIGH POC
8.4
CVE-2015-3864 CRITICAL POC
10.0
CVE-2012-1182 CRITICAL POC
10.0
CVE-2015-1538 CRITICAL POC
10.0
CVE-2016-3645 CRITICAL POC
9.8
CVE-2015-3087 CRITICAL POC
10.0
CVE-2015-2470 CRITICAL POC
9.3
CVE-2013-4124 MEDIUM POC
5.0

Same technique Denial Of Service

View all
CVE-2015-5119 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2011-0611 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2012-0507 CRITICAL POC
9.8
CVE-2014-1761 HIGH POC
7.8
CVE-2015-5122 CRITICAL POC
9.8
CVE-2011-0609 HIGH POC
7.8

Share

CVE-2012-4847 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy