| CVE-2021-38903 |
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to cross-site scripting, caused by improper validation…
|
5.4
Medium
|
Apr 22, 2022 |
| CVE-2021-38886 |
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to cross-site request forgery which could allow an…
|
4.3
Medium
|
Apr 22, 2022 |
| CVE-2021-29824 |
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to priviledge escalation where a lower level user could…
|
3.1
Low
|
Apr 22, 2022 |
| CVE-2021-20464 |
IBM Cognos Analytics PowerPlay (IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7) could be vulnerable to an XML Bomb…
|
6.5
Medium
|
Apr 22, 2022 |
| CVE-2021-38909 |
IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site scripting
|
5.4
Medium
|
Dec 3, 2021 |
| CVE-2021-29867 |
IBM Cognos Analytics 11.1.7 and 11.2.0 could allow an authenticated to view or edit a Jupyter notebook that they…
|
5.4
Medium
|
Dec 3, 2021 |
| CVE-2021-29756 |
IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site request forgery (CSRF) in the My Inbox page which…
|
4.3
Medium
|
Dec 3, 2021 |
| CVE-2021-29719 |
IBM Cognos Analytics 11.1.7 and 11.2.0 could be vulnerable to client side vulnerabilties due to a web response…
|
5.3
Medium
|
Dec 3, 2021 |
| CVE-2021-29716 |
IBM Cognos Analytics 11.1.7 and 11.2.0 could allow a low level user to reas of the application that privileged user…
|
2.7
Low
|
Dec 3, 2021 |
| CVE-2021-20493 |
IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site scripting
|
6.1
Medium
|
Dec 3, 2021 |
| CVE-2021-20470 |
IBM Cognos Analytics 11.1.7 and 11.2.0 does not require that users should have strong passwords by default, which…
|
5.9
Medium
|
Dec 3, 2021 |
| CVE-2021-29745 |
IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to priviledge escalation where a lower evel user could have…
|
5.4
Medium
|
Oct 15, 2021 |
| CVE-2021-29679 |
IBM Cognos Analytics 11.1.7 and 11.2.0 could allow an authenticated user to execute code remotely due to incorrectly…
|
8.8
High
|
Oct 15, 2021 |
| CVE-2020-4951 |
IBM Cognos Analytics 11.1.7 and 11.2.0 contains locally cached browser data, that could allow a local attacker to obtain…
|
4.0
Medium
|
Oct 15, 2021 |
| CVE-2021-20461 |
IBM Cognos Analytics 10.0 and 11.1 is susceptible to a weakness in the implementation of the System Appearance…
|
4.3
Medium
|
Jun 30, 2021 |
| CVE-2020-4561 |
IBM Cognos Analytics 11.0 and 11.1 DQM API allows submitting of all control requests in unauthenticated sessions
|
10.0
Critical
|
May 31, 2021 |
| CVE-2020-4520 |
IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to inject malicious HTML code that when viewed by the…
|
7.1
High
|
May 31, 2021 |
| CVE-2020-4354 |
IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting
|
5.4
Medium
|
May 31, 2021 |
| CVE-2020-4300 |
IBM Cognos Analytics 11.0 and 11.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML…
|
8.2
High
|
May 31, 2021 |
| CVE-2019-4730 |
IBM Cognos Analytics 11.0 and 11.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML…
|
7.1
High
|
May 31, 2021 |
| CVE-2019-4724 |
IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain credentials from a user's browser via…
|
4.6
Medium
|
May 31, 2021 |
| CVE-2019-4723 |
IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain credentials from a user's browser via…
|
4.6
Medium
|
May 31, 2021 |
| CVE-2019-4722 |
IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information via a stack trace due…
|
4.3
Medium
|
May 31, 2021 |
| CVE-2019-4653 |
IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting
|
5.4
Medium
|
May 31, 2021 |
| CVE-2019-4471 |
IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information, caused by the…
|
5.3
Medium
|
May 31, 2021 |