Read the docs

IBM

Records9712All Threatist records
Exploited (KEV)11In CISA KEV
CVSS critical986CVSS 9.0–10.0
CVSS high2776CVSS 7.0–8.9

Exploited now

IBM records in CISA KEV
TI-2026-08085 IBM Langflow Code Injection Vulnerability Priority CRITICAL 100KEV 2026-08-04TI-2022-23774 IBM Aspera Faspex Code Execution Vulnerability Priority CRITICAL 100KEV 2023-02-21TI-2013-03488 IBM InfoSphere BigInsights Invalid Input Vulnerability Priority CRITICAL 88KEV 2022-05-25TI-2014-05157 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Priority CRITICAL 100KEV 2022-01-28TI-2014-05975 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Priority CRITICAL 100KEV 2022-01-28TI-2015-06198 IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. Priority CRITICAL 100KEV 2022-01-10

Components

Products in the NVD configurations · select one to filter the records
Aix 545 records CRITICAL Websphere Application Server 503 records CRITICAL Db2 351 records HIGH Vios 237 records HIGH I 208 records HIGH Sterling B2b Integrator 204 records CRITICAL Rational Quality Manager 202 records MEDIUM Qradar Security Information And Event Manager 192 records CRITICAL

Records

29 records in Cognos Business Intelligence · all components

TI-2016-07351 CVE-2016-8960 · GHSA-vxjm-8m57-p725

Access control flaw in IBM Cognos Business Intelligence

Priority MEDIUM 41

IBM Cognos Business Intelligence 10.2 could allow a user with lower privilege Capabilities to adopt the Capabilities of a higher-privilege user by intercepting the higher-privilege user's cookie value from its HTTP reque…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01545 Published 2017-03-27 No fix listed CWE-264
TI-2018-01683 CVE-2018-1934 · GHSA-c5wh-g3rj-mwcc

Cross-site request forgery in IBM Cognos Business Intelligence

Priority LOW 38

IBM Cognos Business Intelligence 10.2.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0043 Published 2019-12-20 No fix listed CWE-352
TI-2016-02540 CVE-2016-3036 · GHSA-qq24-r7mg-5qrg

Memory corruption in IBM Cognos TM1

Priority LOW 36

IBM Cognos TM1 10.1 and 10.2 is vulnerable to a denial of service, caused by a stack-based buffer overflow when parsing packets.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.0167 Published 2017-04-17 No fix listed CWE-119
TI-2016-00225 CVE-2016-0254 · GHSA-rrh8-365p-pw96

XML external entity injection in IBM Cognos Business Intelligence

Priority LOW 33

IBM Cognos Business Intelligence 10.1 and 10.2 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01895 Published 2017-06-07 No fix listed CWE-611
TI-2017-01196 CVE-2017-1486 · GHSA-qhhf-5wqx-9f99

Cross-site scripting in IBM Cognos Business Intelligence

Priority LOW 29

IBM Cognos Business Intelligence 10.2, 10.2.1, 10.2.1.1, and 10.2.2 is vulnerable to cross-site scripting.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00877 Published 2018-04-23 No fix listed CWE-79
TI-2016-02541 CVE-2016-3037 · GHSA-fj22-j2fg-9f28

Information disclosure in IBM Cognos TM1

Priority LOW 27

IBM Cognos TM1 10.1 and 10.2 provides a service to return the victim's password with a valid session key.

CVSS 3.0MEDIUM 5.7 Network Low privileges User interaction EPSS 0.00914 Published 2017-04-17 No fix listed CWE-200
TI-2016-00307 CVE-2016-0346 · GHSA-vvfq-w86c-mvj9

Cross-site scripting (XSS) vulnerability in IBM Cognos Business Intelligence 10.2 before…

Priority LOW 27

Cross-site scripting (XSS) vulnerability in IBM Cognos Business Intelligence 10.2 before IF20, 10.2.1 before IF17, 10.2.1.1 before IF16, 10.2.2 before IF12, and 10.1.1 before IF19 allows remote authenticated users to inj…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01104 Published 2016-07-03 No fix listed CWE-79
TI-2016-00193 CVE-2016-0221 · GHSA-6r6q-5mwq-h2mg

Cross-site scripting (XSS) vulnerability in IBM Cognos TM1, as used in IBM Cognos…

Priority LOW 27

Cross-site scripting (XSS) vulnerability in IBM Cognos TM1, as used in IBM Cognos Business Intelligence 10.2 before IF20, 10.2.1 before IF17, 10.2.1.1 before IF16, 10.2.2 before IF12, and 10.1.1 before IF19, allows remot…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01104 Published 2016-07-03 No fix listed CWE-79
TI-2013-03521 CVE-2013-4034 · GHSA-5mpf-9249-jgx6

IBM Cognos Business Intelligence 8.4.1 before IF3, 10.1.0 before IF4, 10.1.1 before IF4…

Priority LOW 27

IBM Cognos Business Intelligence 8.4.1 before IF3, 10.1.0 before IF4, 10.1.1 before IF4, 10.2.0 before IF4, 10.2.1 before IF2, and 10.2.1.1 before IF1 allows remote authenticated users to read arbitrary files via an XML…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.05555 Published 2013-11-16 No fix listed CWE-264
TI-2016-00191 CVE-2016-0218 · GHSA-vq37-vvmq-jwxp

Cross-site scripting in IBM Cognos Business Intelligence

Priority LOW 26

IBM Cognos Business Intelligence and IBM Cognos Analytics are vulnerable to cross-site scripting, caused by improper validation of user-supplied input.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00705 Published 2017-02-01 No fix listed CWE-79
TI-2014-00787 CVE-2014-0854 · GHSA-84f5-pfh3-xh7j

The server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1 before IF6, 10.1.1 before…

Priority LOW 26

The server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1 before IF6, 10.1.1 before IF5, 10.2 before IF7, 10.2.1 before IF4, and 10.2.1.1 before IF4 allows remote authenticated users to read arbitrary files via an…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0181 Published 2014-02-22 No fix listed CWE-264
TI-2016-02542 CVE-2016-3038 · GHSA-hcq4-cqg9-5wj3

Cross-site scripting in IBM Cognos TM1

Priority LOW 25

IBM Cognos TM1 10.1 and 10.2 is vulnerable to cross-site scripting.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00538 Published 2017-04-17 No fix listed CWE-79
TI-2013-05548 CVE-2013-6732 · GHSA-4p35-vf8h-253r

Cross-site scripting (XSS) vulnerability in the server in IBM Cognos Business…

Priority LOW 23

Cross-site scripting (XSS) vulnerability in the server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1 before IF6, 10.1.1 before IF5, 10.2 before IF7, 10.2.1 before IF4, and 10.2.1.1 before IF4 allows remote attacke…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01362 Published 2014-02-22 No fix listed CWE-79
TI-2012-01961 CVE-2012-2193 · GHSA-2f2q-j862-78mf

Cross-site scripting (XSS) vulnerability in Query Studio in IBM Cognos Business…

Priority LOW 22

Cross-site scripting (XSS) vulnerability in Query Studio in IBM Cognos Business Intelligence (BI) 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 allows user-assisted remote attackers to inject…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01148 Published 2013-03-02 No fix listed CWE-79
TI-2012-04086 CVE-2012-4837 · GHSA-65gp-cjj6-w8mh

IBM Cognos Business Intelligence (BI) 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before…

Priority LOW 21

IBM Cognos Business Intelligence (BI) 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 allows remote authenticated users to conduct XPath injection attacks, and read arbitrary XML files, via unsp…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.01082 Published 2013-03-02 No fix listed CWE-200
TI-2014-05067 CVE-2014-6145 · GHSA-8rgq-v5p6-gghp

Cross-site scripting (XSS) vulnerability in the server in IBM Cognos Business…

Priority LOW 19

Cross-site scripting (XSS) vulnerability in the server in IBM Cognos Business Intelligence 10.1 before IF10, 10.1.1 before IF9, 10.2 before IF11, 10.2.1 before IF8, and 10.2.1.1 before IF7 allows remote authenticated use…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01077 Published 2014-12-12 No fix listed CWE-79
TI-2014-00793 CVE-2014-0861 · GHSA-xh45-57vp-7gw8

Cross-site scripting (XSS) vulnerability in the server in IBM Cognos Business…

Priority LOW 19

Cross-site scripting (XSS) vulnerability in the server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1 before IF6, 10.1.1 before IF5, 10.2 before IF7, 10.2.1 before IF4, and 10.2.1.1 before IF4 allows remote attacke…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01089 Published 2014-02-22 No fix listed CWE-79
Load more
Open these records in search →