Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Advisory: IBM Cognos Analytics — ibm.com/support/pages/node/6841801 Clear all filters
TI-2022-18547 CVE-2022-39160 · GHSA-jx4f-2jg9-fg3h

IBM Cognos Analytics cross-site scripting

Priority LOW 28

IBM Cognos Analytics 11.2.1, 11.2.0, and 11.1.7 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00418 Published 2022-12-19 No fix listed CWE-79
TI-2022-21549 CVE-2022-43883 · GHSA-28cw-qjjv-g5g8

IBM Cognos Analytics data manipulation

Priority LOW 34

IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could be vulnerable to a Log Injection attack by constructing URLs from user-controlled data.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00624 Published 2022-12-19 No fix listed CWE-116
TI-2022-21550 CVE-2022-43887 · GHSA-8m88-r8cj-f72f

IBM Cognos Analytics information disclosure

Priority LOW 31

IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could be vulnerable to sensitive information exposure by passing API keys to log files.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00562 Published 2022-12-19 No fix listed CWE-532
TI-2022-18240 CVE-2022-38708 · GHSA-cpf6-q438-6grj

IBM Cognos Analytics server-side request forgery

Priority MEDIUM 46

IBM Cognos Analytics 11.1.7 11.2.0, and 11.2.1 could be vulnerable to a Server-Side Request Forgery Attack (SSRF) attack by constructing URLs from user-controlled data.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00456 Published 2022-12-19 No fix listed CWE-918