IBM Security Bulletin: IBM Cognos Business Intelligence Server : IBM Cognos Business Intelligence Server is affected by CVE-2016-0398

This bulletin addresses a recently discovered content spoofing vulnerability.

CVE(s): CVE-2016-0398

Affected product(s) and affected version(s):

  • IBM Cognos Business Intelligence Server 10.2.2
  • IBM Cognos Business Intelligence Server 10.2.1.1
  • IBM Cognos Business Intelligence Server 10.2.1
  • IBM Cognos Business Intelligence Server 10.2
  • IBM Cognos Business Intelligence Server 10.1.1

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/1TPZCD3
X-Force Database: http://ift.tt/1TJMbyW



from IBM Product Security Incident Response Team http://ift.tt/1TPZenV