<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://db.gcve.eu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 16 May 2026 12:59:11 +0000</lastBuildDate>
    <item>
      <title>de6e5a96-250c-441d-812c-39ec05212562</title>
      <link>https://db.gcve.eu/sighting/de6e5a96-250c-441d-812c-39ec05212562/export</link>
      <description>{"uuid": "de6e5a96-250c-441d-812c-39ec05212562", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-38909", "type": "seen", "source": "https://t.me/cibsecurity/33324", "content": "\u203c CVE-2021-38909 \u203c\n\nIBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 209706.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-03T20:38:03.000000Z"}</description>
      <content:encoded>{"uuid": "de6e5a96-250c-441d-812c-39ec05212562", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-38909", "type": "seen", "source": "https://t.me/cibsecurity/33324", "content": "\u203c CVE-2021-38909 \u203c\n\nIBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 209706.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-03T20:38:03.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/de6e5a96-250c-441d-812c-39ec05212562/export</guid>
      <pubDate>Fri, 03 Dec 2021 20:38:03 +0000</pubDate>
    </item>
    <item>
      <title>3f26c02d-174d-4afe-8bf1-7cbfab4486a1</title>
      <link>https://db.gcve.eu/sighting/3f26c02d-174d-4afe-8bf1-7cbfab4486a1/export</link>
      <description>{"uuid": "3f26c02d-174d-4afe-8bf1-7cbfab4486a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-38901", "type": "seen", "source": "https://t.me/cibsecurity/33884", "content": "\u203c CVE-2021-38901 \u203c\n\nIBM Spectrum Protect Operations Center 7.1, under special configurations, could allow a local user to obtain highly sensitive information. IBM X-Force ID: 209610.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-13T22:12:22.000000Z"}</description>
      <content:encoded>{"uuid": "3f26c02d-174d-4afe-8bf1-7cbfab4486a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-38901", "type": "seen", "source": "https://t.me/cibsecurity/33884", "content": "\u203c CVE-2021-38901 \u203c\n\nIBM Spectrum Protect Operations Center 7.1, under special configurations, could allow a local user to obtain highly sensitive information. IBM X-Force ID: 209610.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-13T22:12:22.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/3f26c02d-174d-4afe-8bf1-7cbfab4486a1/export</guid>
      <pubDate>Mon, 13 Dec 2021 22:12:22 +0000</pubDate>
    </item>
    <item>
      <title>205aae55-7501-49b6-ae96-22024731850c</title>
      <link>https://db.gcve.eu/sighting/205aae55-7501-49b6-ae96-22024731850c/export</link>
      <description>{"uuid": "205aae55-7501-49b6-ae96-22024731850c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-38900", "type": "seen", "source": "https://t.me/cibsecurity/34467", "content": "\u203c CVE-2021-38900 \u203c\n\nIBM Business Process Manager 8.5 and 8.6 and IBM Business Automation Workflow 18.0, 19.0, 20.0 and 21.0 could allow a privileged user to obtain highly sensitive information due to improper access controls. IBM X-Force ID: 209607.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-21T22:13:49.000000Z"}</description>
      <content:encoded>{"uuid": "205aae55-7501-49b6-ae96-22024731850c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-38900", "type": "seen", "source": "https://t.me/cibsecurity/34467", "content": "\u203c CVE-2021-38900 \u203c\n\nIBM Business Process Manager 8.5 and 8.6 and IBM Business Automation Workflow 18.0, 19.0, 20.0 and 21.0 could allow a privileged user to obtain highly sensitive information due to improper access controls. IBM X-Force ID: 209607.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-21T22:13:49.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/205aae55-7501-49b6-ae96-22024731850c/export</guid>
      <pubDate>Tue, 21 Dec 2021 22:13:49 +0000</pubDate>
    </item>
    <item>
      <title>34cd9b97-5e2e-4d67-9cc0-b35045183540</title>
      <link>https://db.gcve.eu/sighting/34cd9b97-5e2e-4d67-9cc0-b35045183540/export</link>
      <description>{"uuid": "34cd9b97-5e2e-4d67-9cc0-b35045183540", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-38905", "type": "seen", "source": "https://t.me/cibsecurity/41330", "content": "\u203c CVE-2021-38905 \u203c\n\nIBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 could allow an authenticated user to view report pages that they should not have access to. IBM X-Force ID: 209697.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-04-22T20:27:58.000000Z"}</description>
      <content:encoded>{"uuid": "34cd9b97-5e2e-4d67-9cc0-b35045183540", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-38905", "type": "seen", "source": "https://t.me/cibsecurity/41330", "content": "\u203c CVE-2021-38905 \u203c\n\nIBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 could allow an authenticated user to view report pages that they should not have access to. IBM X-Force ID: 209697.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-04-22T20:27:58.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/34cd9b97-5e2e-4d67-9cc0-b35045183540/export</guid>
      <pubDate>Fri, 22 Apr 2022 20:27:58 +0000</pubDate>
    </item>
    <item>
      <title>ecde9cf0-b502-4bda-9db9-bd514cb65e0b</title>
      <link>https://db.gcve.eu/sighting/ecde9cf0-b502-4bda-9db9-bd514cb65e0b/export</link>
      <description>{"uuid": "ecde9cf0-b502-4bda-9db9-bd514cb65e0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-38904", "type": "seen", "source": "https://t.me/cibsecurity/41332", "content": "\u203c CVE-2021-38904 \u203c\n\nIBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 could allow a remote attacker to obtain credentials from a user's browser via incorrect autocomplete settings. IBM X-Force ID: 209693.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-04-22T20:28:03.000000Z"}</description>
      <content:encoded>{"uuid": "ecde9cf0-b502-4bda-9db9-bd514cb65e0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-38904", "type": "seen", "source": "https://t.me/cibsecurity/41332", "content": "\u203c CVE-2021-38904 \u203c\n\nIBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 could allow a remote attacker to obtain credentials from a user's browser via incorrect autocomplete settings. IBM X-Force ID: 209693.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-04-22T20:28:03.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/ecde9cf0-b502-4bda-9db9-bd514cb65e0b/export</guid>
      <pubDate>Fri, 22 Apr 2022 20:28:03 +0000</pubDate>
    </item>
    <item>
      <title>2a6834f6-79f9-413d-961d-046a05335020</title>
      <link>https://db.gcve.eu/sighting/2a6834f6-79f9-413d-961d-046a05335020/export</link>
      <description>{"uuid": "2a6834f6-79f9-413d-961d-046a05335020", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-38903", "type": "seen", "source": "https://t.me/cibsecurity/41335", "content": "\u203c CVE-2021-38903 \u203c\n\nIBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to inject malicious script into a Web page which would be executed in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials. IBM X-Force ID: 209691.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-04-22T20:28:06.000000Z"}</description>
      <content:encoded>{"uuid": "2a6834f6-79f9-413d-961d-046a05335020", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-38903", "type": "seen", "source": "https://t.me/cibsecurity/41335", "content": "\u203c CVE-2021-38903 \u203c\n\nIBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to inject malicious script into a Web page which would be executed in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials. IBM X-Force ID: 209691.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-04-22T20:28:06.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/2a6834f6-79f9-413d-961d-046a05335020/export</guid>
      <pubDate>Fri, 22 Apr 2022 20:28:06 +0000</pubDate>
    </item>
  </channel>
</rss>
