IT

Tracker / CVE-2022-39163

CVE-2022-39163

Medium 4.7

IBM Cognos Controller 11.0.0 through 11.1.0 is vulnerable to a Client-Side Desync (CSD) attack where an attacker could exploit a desynchronized browser connection that could lead to further cross-site scripting (XSS) attacks.

Affected products and versions

ibm cognos_controller · 11.0.0 → 11.0.1
ibm controller

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References