4.3
Medium
CVE-2025-36076 IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 stores sensitive information in source…
Description
IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 stores sensitive information in source code could be used by an authenticated user in further attacks against the system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cognos Analytics 12.1 | 12.1.0 → latest | No fix stated |
| Cognos Analytics 12.0 | 12.0.4 → latest | No fix stated |
Other CVEs of Cognos Analytics
The 102 CVEs of Cognos Analytics →
CVE-2025-33147
IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 could allow an attacker on a shared…
5.9
Medium
CVE-2024-56344
IBM Cognos Analytics 12.0.4 through 12.0.4 FP2, and 12.1.0 through 12.1.3 FP1 could allow a remote attacker to obtain…
5.9
Medium
CVE-2026-7884
IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 allows a non-privileged user to edit their…
5.4
Medium
CVE-2026-15995
IBM Cognos Analytics 12.1.3 GA Version with build number through 12.1.3-2606251736 could allow an attacker to obtain…
5.4
Medium