9.0
Critical
CVE-2024-51466 IBM Cognos Analytics 11.2.0 through 11.2.4 FP4 and 12.0.0 through 12.0.4 is vulnerable to an Expression Language (EL)…
Description
IBM Cognos Analytics 11.2.0 through 11.2.4 FP4 and 12.0.0 through 12.0.4 is vulnerable to an Expression Language (EL) Injection vulnerability. A remote attacker could exploit this vulnerability to expose sensitive information, consume memory resources, and/or cause the server to crash when using a specially crafted EL statement.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cognos Analytics 12.0 | 12.0.0 → 12.0.4 | No fix stated |
| Cognos Analytics 11.2 | 11.2.0 → 11.2.4 | No fix stated |
Other CVEs of Cognos Analytics
The 102 CVEs of Cognos Analytics →
CVE-2025-36076
IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 stores sensitive information in source…
4.3
Medium
CVE-2025-33147
IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 could allow an attacker on a shared…
5.9
Medium
CVE-2024-56344
IBM Cognos Analytics 12.0.4 through 12.0.4 FP2, and 12.1.0 through 12.1.3 FP1 could allow a remote attacker to obtain…
5.9
Medium
CVE-2026-7884
IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 allows a non-privileged user to edit their…
5.4
Medium