| CVE-2023-30996 |
IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 could be vulnerable to information leakage due to unverified sources…
|
5.3
Medium
|
Feb 24, 2024 |
| CVE-2023-32344 |
IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 is vulnerable to form action hijacking where it is possible to modify…
|
4.3
Medium
|
Feb 24, 2024 |
| CVE-2023-38359 |
IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 is vulnerable to cross-site scripting
|
6.1
Medium
|
Feb 24, 2024 |
| CVE-2023-35011 |
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to server-side request forgery (SSRF)
|
5.4
Medium
|
Aug 16, 2023 |
| CVE-2023-35009 |
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could allow a remote attacker to obtain system information without…
|
5.3
Medium
|
Aug 16, 2023 |
| CVE-2023-28530 |
IBM Cognos Analytics 11.1 and 11.2 is vulnerable to stored cross-site scripting, caused by improper validation of SVG…
|
5.4
Medium
|
Jul 22, 2023 |
| CVE-2023-25929 |
IBM Cognos Analytics 11.1 and 11.2 is vulnerable to cross-site scripting
|
4.6
Medium
|
Jul 22, 2023 |
| CVE-2021-39036 |
IBM Cognos Analytics 11.1 and 11.2 is vulnerable to cross-site scripting
|
6.1
Medium
|
May 12, 2023 |
| CVE-2022-39160 |
IBM Cognos Analytics 11.2.1, 11.2.0, and 11.1.7 is vulnerable to cross-site scripting
|
6.1
Medium
|
Dec 19, 2022 |
| CVE-2022-43883 |
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could be vulnerable to a Log Injection attack by constructing URLs…
|
6.5
Medium
|
Dec 19, 2022 |
| CVE-2022-43887 |
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could be vulnerable to sensitive information exposure by passing API…
|
5.3
Medium
|
Dec 19, 2022 |
| CVE-2022-38708 |
IBM Cognos Analytics 11.1.7 11.2.0, and 11.2.1 could be vulnerable to a Server-Side Request Forgery Attack (SSRF) attack…
|
6.5
Medium
|
Dec 19, 2022 |
| CVE-2022-36773 |
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to an XML External Entity Injection (XXE) attack when…
|
7.1
High
|
Sep 1, 2022 |
| CVE-2022-30614 |
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to a denial of service via email flooding caused by…
|
6.5
Medium
|
Sep 1, 2022 |
| CVE-2021-39045 |
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could allow a local attacker to obtain information due to the…
|
6.2
Medium
|
Sep 1, 2022 |
| CVE-2021-39009 |
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 stores user credentials in plain clear text which can be read by a local…
|
4.4
Medium
|
Sep 1, 2022 |
| CVE-2021-29823 |
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to cross-site request forgery which could allow an…
|
4.3
Medium
|
Sep 1, 2022 |
| CVE-2021-20468 |
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to cross-site request forgery which could allow an…
|
4.3
Medium
|
Sep 1, 2022 |
| CVE-2020-4301 |
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to cross-site request forgery which could allow an…
|
4.3
Medium
|
Sep 1, 2022 |
| CVE-2021-39047 |
IBM Planning Analytics 2.0 and IBM Cognos Analytics 11.2.1, 11.2.0, and 11.1.7 are vulnerable to cross-site scripting
|
6.1
Medium
|
Jun 24, 2022 |
| CVE-2021-38945 |
IBM Cognos Analytics 11.2.1, 11.2.0, and 11.1.7 could allow a remote attacker to upload arbitrary files, caused by…
|
6.3
Medium
|
Jun 24, 2022 |
| CVE-2021-29768 |
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could allow a low level user to obtain sensitive information from the…
|
4.3
Medium
|
Jun 24, 2022 |
| CVE-2021-38946 |
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to cross-site scripting
|
5.4
Medium
|
Apr 22, 2022 |
| CVE-2021-38905 |
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 could allow an authenticated user to view report pages that they…
|
4.3
Medium
|
Apr 22, 2022 |
| CVE-2021-38904 |
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 could allow a remote attacker to obtain credentials from a user's…
|
4.6
Medium
|
Apr 22, 2022 |