Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Priority LOW 25

IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to server-side request forgery (SSRF).

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00459 Published 2023-08-16 No fix listed CWE-918
TI-2023-17494 CVE-2023-35009 · GHSA-v74q-jm4w-2vq4

IBM Cognos Analytics information disclosure

Priority LOW 32

IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could allow a remote attacker to obtain system information without authentication which could be used in reconnaissance to gather information that could be used for future…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01014 Published 2023-08-16 No fix listed CWE-209