| CVE-2025-36076 |
IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 stores sensitive information in source…
|
4.3
Medium
|
Sep 18, 2026 |
| CVE-2025-33147 |
IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 could allow an attacker on a shared…
|
5.9
Medium
|
Sep 18, 2026 |
| CVE-2024-56344 |
IBM Cognos Analytics 12.0.4 through 12.0.4 FP2, and 12.1.0 through 12.1.3 FP1 could allow a remote attacker to obtain…
|
5.9
Medium
|
Sep 18, 2026 |
| CVE-2026-7884 |
IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 allows a non-privileged user to edit their…
|
5.4
Medium
|
Sep 14, 2026 |
| CVE-2026-15995 |
IBM Cognos Analytics 12.1.3 GA Version with build number through 12.1.3-2606251736 could allow an attacker to obtain…
|
5.4
Medium
|
Jul 17, 2026 |
| CVE-2025-3633 |
IBM Cognos Analytics 11.2.0, 11.2.4, 12.0, and 12.1.0 and IBM Cognos Transformer 11.2.4, 12.0, and 12.1.0 are vulnerable…
|
5.4
Medium
|
May 27, 2026 |
| CVE-2025-36126 |
IBM Cognos Analytics 11.2.0, 12.0, and 12.1.0 and IBM Cognos Transformer 12.0, 11.2.4, and 12.1.0 is vulnerable to…
|
6.4
Medium
|
May 26, 2026 |
| CVE-2024-52900 |
IBM Cognos Analytics 11.2.0 through 12.2.4 Fix Pack 5 and 12.0.0 through 12.0.4 is vulnerable to stored cross-site…
|
6.4
Medium
|
Jun 28, 2025 |
| CVE-2025-0923 |
IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, 12.0.2, 12.0.3, and 12.0.4 stores source…
|
5.3
Medium
|
Jun 11, 2025 |
| CVE-2025-0917 |
IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, 12.0.2, 12.0.3, and 12.0.4 is vulnerable to…
|
5.5
Medium
|
Jun 11, 2025 |
| CVE-2025-25032 |
IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, 12.0.2, 12.0.3, and 12.0.4 could allow an…
|
7.5
High
|
Jun 11, 2025 |
| CVE-2024-56340 |
IBM Cognos Analytics 11.2.0 through 11.2.4 FP5 is vulnerable to local file inclusion vulnerability, allowing an attacker…
|
6.5
Medium
|
Feb 28, 2025 |
| CVE-2025-0823 |
IBM Cognos Analytics 11.2.0 through 11.2.4 FP5 and 12.0.0 through 12.0.4 could allow a remote attacker to traverse…
|
6.5
Medium
|
Feb 28, 2025 |
| CVE-2024-49352 |
IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, 12.0.2, 12.0.3, and 12.0.4 is vulnerable to…
|
7.1
High
|
Feb 5, 2025 |
| CVE-2024-40695 |
IBM Cognos Analytics 11.2.0 through 11.2.4 FP4 and 12.0.0 through 12.0.4 could be vulnerable to malicious file upload…
|
8.0
High
|
Dec 20, 2024 |
| CVE-2024-51466 |
IBM Cognos Analytics 11.2.0 through 11.2.4 FP4 and 12.0.0 through 12.0.4 is vulnerable to an Expression Language (EL)…
|
9.0
Critical
|
Dec 20, 2024 |
| CVE-2024-25042 |
IBM Cognos Analytics 11.2.0 through 11.2.4 and 12.0.0 through 12.0.3 is potentially vulnerable to Cross Site…
|
5.4
Medium
|
Dec 18, 2024 |
| CVE-2024-45082 |
IBM Cognos Analytics 11.2.0 through 11.2.4 and 12.0.0 through 12.0.3 could allow a remote attacker to conduct…
|
6.8
Medium
|
Dec 18, 2024 |
| CVE-2024-41752 |
IBM Cognos Analytics 11.2.0 through 11.2.4 and 12.0.0 through 12.0.3 is vulnerable to HTML injection
|
5.4
Medium
|
Dec 18, 2024 |
| CVE-2024-40703 |
IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, 12.0.2, 12.0.3, and IBM Cognos Analytics…
|
5.5
Medium
|
Sep 22, 2024 |
| CVE-2024-25041 |
IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, and 12.0.2 is potentially vulnerable to…
|
5.4
Medium
|
Jun 28, 2024 |
| CVE-2024-25053 |
IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, and 12.0.2 is vulnerable to improper…
|
5.9
Medium
|
Jun 28, 2024 |
| CVE-2024-25047 |
IBM Cognos Analytics 11.2.0 through 11.2.4 and 12.0.0 through 12.0.2 is vulnerable to injection attacks in application…
|
8.6
High
|
May 2, 2024 |
| CVE-2023-43051 |
IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 is vulnerable to cross-site scripting
|
5.4
Medium
|
Feb 24, 2024 |
| CVE-2022-34357 |
IBM Cognos Analytics Mobile Server 11.1.7, 11.2.4, and 12.0.0 is vulnerable to Denial of Service due to due to weak or…
|
6.5
Medium
|
Feb 24, 2024 |