CVE-2016-9711

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

IBM Predictive Solutions Foundation (IBM Cognos Analytics 11.0) reveals sensitive information in detailed error messages that could aid an attacker in further attacks against the system. IBM X-Force ID: 119619.

Metrics

CVSS 3.0 5.3/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
IBM	Cognos Analytics	11.0

References

http://www.ibm.com/support/docview.wss?uid=swg22014337Vendor Advisory
http://www.securityfocus.com/bid/103495Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/119619VDB Entry, Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg22014337Vendor Advisory
http://www.securityfocus.com/bid/103495Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/119619VDB Entry, Vendor Advisory

Timeline

Published: Mar 22, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-97148.8IBM InfoSphere Master Data Management Server 10.1, 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site request forgery which could CVE-2016-97155.4IBM InfoSphere Master Data Management Server 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site scripting. This vulnerability allo CVE-2016-97168.8IBM InfoSphere Master Data Management Server 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site request forgery which could allow CVE-2016-97176.5HTTP Parameter Override is identified in the IBM Infosphere Master Data Management (MDM) 10.1. 11.0. 11.3, 11.4, 11.5, and 11.6 product. It CVE-2016-97185.4IBM InfoSphere Master Data Management Server 10.1. 11.0. 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site scripting. This vulnerabilit CVE-2016-97195.7IBM InfoSphere Master Data Management Server 10.1. 11.0. 11.3, 11.4, 11.5, and 11.6 could allow a remote attacker to hijack the clicking act CVE-2016-97205.3IBM QRadar 7.2 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IB CVE-2016-97224.2IBM QRadar 7.2 and 7.3 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by u CVE-2016-97236.1IBM QRadar 7.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus CVE-2016-97248.1IBM QRadar 7.2 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remo CVE-2016-97255.3IBM QRadar Incident Forensics 7.2 allows for Cross-Origin Resource Sharing (CORS), which is a mechanism that allows web sites to request res CVE-2016-97268.8IBM QRadar Incident Forensics 7.2 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a spec