CVE-2014-0877

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-09-05 · updated 2026-06-17
Weakness: CWE-264

Description

IBM Cognos TM1 10.2.0.2 before IF1 and 10.2.2.0 before IF1 allows remote attackers to bypass intended access restrictions by visiting the Rights page and then following a generated link.

Affected products

IBM Cognos TM1: 10.2.0.2, 10.2.2.0

References

http://www-01.ibm.com/support/docview.wss?uid=swg21682395
https://exchange.xforce.ibmcloud.com/vulnerabilities/91064
http://www-01.ibm.com/support/docview.wss?uid=swg21682395
https://exchange.xforce.ibmcloud.com/vulnerabilities/91064

Get alerted when CVE-2014-0877 or the next vulnerability affects your stack