Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: IBM Cognos Dashboards on Cloud Pak for Data — ibm.com/support/pages/node/7031207 Clear all filters
TI-2023-20076 CVE-2023-38735 · GHSA-9q57-wj63-96j5

IBM Cognos Dashboards improper authentication

Priority LOW 30

IBM Cognos Dashboards on Cloud Pak for Data 4.7.0 could allow a remote attacker to bypass security restrictions, caused by a reverse tabnabbing flaw.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00643 Published 2023-10-22 No fix listed CWE-287
TI-2023-19682 CVE-2023-38276 · GHSA-vm4p-cgrm-3hvm

IBM Cognos Dashboards information disclosure

Priority LOW 39

IBM Cognos Dashboards on Cloud Pak for Data 4.7.0 exposes sensitive information in environment variables which could aid in further attacks against the system.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00401 Published 2023-10-22 No fix listed CWE-319
TI-2023-19681 CVE-2023-38275 · GHSA-5rpw-fg4q-7wj5

IBM Cognos Dashboards information disclosure

Priority LOW 39

IBM Cognos Dashboards on Cloud Pak for Data 4.7.0 exposes sensitive information in container images which could lead to further attacks against the system.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00401 Published 2023-10-22 No fix listed CWE-319