CVE-2012-4858 IBM Cognos Business Intelligence (BI) 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 does not properly validate Java serialized input, which allows remote attackers to execu...
HighCVSS 9.3
EPSS 3.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IBM Cognos Business Intelligence (BI) 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 does not properly validate Java serialized input, which allows remote attackers to execute arbitrary commands via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm cognos business intelligence | = 8.4.1 | No fix listed |
| ibm cognos business intelligence | = 10.1 | No fix listed |
| ibm cognos business intelligence | = 10.1.1 | No fix listed |
| ibm cognos business intelligence | = 10.2 | No fix listed |