Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: IBM Cognos Analytics — ibm.com/support/pages/node/7234674 Clear all filters
TI-2025-00783 CVE-2025-0923 · GHSA-gr5f-7m4r-g5r6

IBM Cognos Analytics information disclosure

Priority LOW 30

IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, 12.0.2, 12.0.3, and 12.0.4 stores source code on the web server that could aid in further attacks against the system.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00295 Published 2025-06-11 No fix listed CWE-540
TI-2025-00780 CVE-2025-0917 · GHSA-q35w-g473-6c73

IBM Cognos Analytics cross-site scripting

Priority LOW 24

IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, 12.0.2, 12.0.3, and 12.0.4 is vulnerable to stored cross-site scripting.

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00218 Published 2025-06-11 No fix listed CWE-79
TI-2025-18705 CVE-2025-25032 · GHSA-v9x3-f4g7-pgm4

IBM Cognos Analytics denial of service

Priority LOW 39

IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, 12.0.2, 12.0.3, and 12.0.4 could allow an authenticated user to cause a denial of service by sending a specially crafted request that would exh…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00412 Published 2025-06-11 No fix listed CWE-770