5.3
Medium
CVE-2023-30996 IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 could be vulnerable to information leakage due to unverified sources…
Description
IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 could be vulnerable to information leakage due to unverified sources in messages sent between Windows objects of different origins. IBM X-Force ID: 254290.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cognos Analytics | Versions not published | |
| cognos_analytics | 12.0.0 | No fix stated |
| cognos_analytics | 11.2.4 | No fix stated |
| cognos_analytics | 11.1.7 | No fix stated |
References
- www.ibm.com www.ibm.com
- exchange.xforce.ibmcloud.com exchange.xforce.ibmcloud.com
- security.netapp.com security.netapp.com
- security.netapp.com security.netapp.com
Timeline
- Published
- Last modified
Other CVEs of Cognos Analytics
The 102 CVEs of Cognos Analytics →
CVE-2025-36076
IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 stores sensitive information in source…
4.3
Medium
CVE-2025-33147
IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 could allow an attacker on a shared…
5.9
Medium
CVE-2024-56344
IBM Cognos Analytics 12.0.4 through 12.0.4 FP2, and 12.1.0 through 12.1.3 FP1 could allow a remote attacker to obtain…
5.9
Medium
CVE-2026-7884
IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 allows a non-privileged user to edit their…
5.4
Medium