Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Advisory: IBM Cognos Analytics — ibm.com/support/pages/node/7123154 Clear all filters
TI-2023-23065 CVE-2023-43051 · GHSA-j95w-c3jf-29mw

IBM Cognos Analytics cross-site scripting

Priority LOW 25

IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00626 Published 2024-02-24 No fix listed CWE-79
TI-2022-15259 CVE-2022-34357 · GHSA-273x-mxvr-9vx2

IBM Cognos Analytics Mobile Server denial of service

Priority LOW 31

IBM Cognos Analytics Mobile Server 11.1.7, 11.2.4, and 12.0.0 is vulnerable to Denial of Service due to due to weak or absence of rate limiting.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01209 Published 2024-02-24 No fix listed CWE-770
TI-2023-14734 CVE-2023-30996 · GHSA-mj54-2qgh-27pf

IBM Cognos Analytics cross-origin resource sharing

Priority LOW 30

IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 could be vulnerable to information leakage due to unverified sources in messages sent between Windows objects of different origins.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00422 Published 2024-02-24 No fix listed CWE-346
TI-2023-15636 CVE-2023-32344 · GHSA-fxmj-6xv8-f3m7

IBM Cognos Analytics cross-site request forgery

Priority LOW 20

IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 is vulnerable to form action hijacking where it is possible to modify the form action to reference an arbitrary path.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0038 Published 2024-02-24 No fix listed CWE-352
TI-2023-19749 CVE-2023-38359 · GHSA-q5mw-2cvx-mjj3

IBM Cognos Analytics cross-site scripting

Priority LOW 28

IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00686 Published 2024-02-24 No fix listed CWE-79