Description
IBM Cognos Controller 11.0.0 through 11.1.0 is vulnerable to a Client-Side Desync (CSD) attack where an attacker could exploit a desynchronized browser connection that could lead to further cross-site scripting (XSS) attacks.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
IBM Cognos Controller
Default version status: unaffected
11.0.0 to ≤ 11.0.1affected
IBM Controller
Default version status: unaffected
11.1.0affected