Read the docs

IBM

Records9712All Threatist records
Exploited (KEV)11In CISA KEV
CVSS critical986CVSS 9.0–10.0
CVSS high2776CVSS 7.0–8.9

Exploited now

IBM records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

9 records in Cognos Analytics Mobile · all components

Priority LOW 35

IBM Cognos Analytics Mobile (iOS) 1.1.0 through 1.1.22 could allow malicious actors to view and modify information coming to and from the application which could then be used to access confidential information on the dev…

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00224 Published 2025-07-21 No fix listed CWE-326
Priority LOW 33

IBM Cognos Analytics Mobile for Android 1.1.14 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00327 Published 2024-12-19 No fix listed CWE-319
Priority LOW 32

IBM Cognos Analytics Mobile (iOS) 1.1.0 through 1.1.22 could allow malicious actors to obtain sensitive information due to the cleartext transmission of data.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00268 Published 2025-07-21 No fix listed CWE-319
Priority LOW 32

IBM Cognos Analytics Mobile (iOS) 1.1.0 through 1.1.22 could be vulnerable to information exposure due to the use of unencrypted network traffic.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00263 Published 2025-07-21 No fix listed CWE-311
Priority LOW 25

IBM Cognos Analytics Mobile for Android applications prior to version 1.1.14 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0048 Published 2022-02-14 No fix listed CWE-79
TI-2024-36966 CVE-2024-55907 · GHSA-5fx3-6rfx-jp6w

IBM Cognos Mobile information disclosure

Priority LOW 24

IBM Cognos Analytics Mobile 1.1 for iOS application could allow an attacker to reverse engineer the codebase to gain knowledge about the programming technique, interface, class definitions, algorithms and functions used…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00267 Published 2025-03-02 No fix listed CWE-540
Priority LOW 23

IBM Cognos Analytics Mobile (iOS) 1.1.0 through 1.1.22 is vulnerable to authentication bypass by using the Local Authentication Framework library which is not needed as biometric authentication is not used in the applica…

CVSS 3.1MEDIUM 5.2 Physical No auth No interaction EPSS 0.0021 Published 2025-07-21 No fix listed CWE-299
TI-2025-00758 CVE-2025-0895 · GHSA-v9qf-m6g5-9c72

IBM Cognos Mobile information disclosure

Priority LOW 12

IBM Cognos Analytics Mobile 1.1 for Android could allow a user with physical access to the device, to obtain sensitive information from debugging code log messages.

CVSS 3.1LOW 2.4 Physical No auth No interaction EPSS 0.00197 Published 2025-03-02 No fix listed CWE-215
Open these records in search →