Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

TI-2024-16518 CVE-2024-25041 · GHSA-9rf7-hpgh-6433

IBM Cognos Analytics cross-site scripting

Priority LOW 25

IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, and 12.0.2 is potentially vulnerable to cross site scripting (XSS).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00381 Published 2024-06-28 No fix listed CWE-79
Priority LOW 26

IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, and 12.0.2 is vulnerable to improper certificate validation when using the IBM Planning Analytics Data Source Connection.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00283 Published 2024-06-28 No fix listed CWE-295