6.5
Medium
CVE-2025-36106 IBM Cognos Analytics Mobile (iOS) 1.1.0 through 1.1.22 could allow malicious actors to view and modify information…
Description
IBM Cognos Analytics Mobile (iOS) 1.1.0 through 1.1.22 could allow malicious actors to view and modify information coming to and from the application which could then be used to access confidential information on the device or network by using a the deprecated or misconfigured AFNetworking library at runtime.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cognos Analytics Mobile 1.1 | 1.1.0 → 1.1.22 | No fix stated |
Other CVEs of Cognos Analytics Mobile
The 9 CVEs of Cognos Analytics Mobile →
CVE-2025-36057
IBM Cognos Analytics Mobile (iOS) 1.1.0 through 1.1.22 is vulnerable to authentication bypass by using the Local…
5.2
Medium
CVE-2025-36062
IBM Cognos Analytics Mobile (iOS) 1.1.0 through 1.1.22 could be vulnerable to information exposure due to the use of…
5.9
Medium
CVE-2025-36107
IBM Cognos Analytics Mobile (iOS) 1.1.0 through 1.1.22 could allow malicious actors to obtain sensitive information…
5.9
Medium
CVE-2024-55907
IBM Cognos Analytics Mobile 1.1 for iOS application could allow an attacker to reverse engineer the codebase to gain…
2.0
Low