| CVE-2020-4388 |
IBM Cognos Analytics 11.0 and 11.1 could be vulnerable to a denial of service attack by failing to catch exceptions in a…
|
6.5
Medium
|
Oct 12, 2020 |
| CVE-2020-4302 |
IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to execute arbitrary code on the system, caused by a…
|
5.5
Medium
|
Oct 12, 2020 |
| CVE-2020-4377 |
IBM Cognos Anaytics 11.0 and 11.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML…
|
8.2
High
|
Aug 3, 2020 |
| CVE-2019-4589 |
IBM Cognos Analytics 11.0 and 11.1 is vulnerable to privlege escalation where the "My schedules and subscriptions"…
|
4.6
Medium
|
Aug 3, 2020 |
| CVE-2019-4366 |
IBM Cognos Analytics 11.0 and 11.1 is susceptible to an information disclosure vulnerability where an attacker could…
|
2.9
Low
|
Aug 3, 2020 |
| CVE-2019-4729 |
IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information when a detailed…
|
4.3
Medium
|
Apr 27, 2020 |
| CVE-2019-4623 |
IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting
|
5.4
Medium
|
Dec 30, 2019 |
| CVE-2019-4343 |
IBM Cognos Analytics 11.0 and 11.1 allows overly permissive cross-origin resource sharing which could allow an…
|
6.5
Medium
|
Dec 30, 2019 |
| CVE-2019-4555 |
IBM Cognos Analytics 11.0 and 11.0 is vulnerable to cross-site scripting
|
5.4
Medium
|
Dec 20, 2019 |
| CVE-2019-4231 |
IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site request forgery which could allow an attacker to…
|
4.3
Medium
|
Dec 20, 2019 |
| CVE-2019-4645 |
IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting
|
6.1
Medium
|
Nov 9, 2019 |
| CVE-2019-4334 |
IBM Cognos Analytics 11.0 and 11.1 could reveal sensitive information to an authenticated user that could be used in…
|
4.3
Medium
|
Nov 9, 2019 |
| CVE-2018-1721 |
IBM Cognos Analytics 11.0 and 11.1 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML…
|
8.3
High
|
Nov 9, 2019 |
| CVE-2019-4342 |
IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting
|
5.4
Medium
|
Sep 17, 2019 |
| CVE-2019-4183 |
IBM Cognos Analytics 11.0, and 11.1 is vulnerable to a denial of service attack that could allow a remote user to send…
|
5.9
Medium
|
Sep 17, 2019 |
| CVE-2019-4139 |
IBM Cognos Analytics 11.0, 11.1.0, and 11.1.1 is vulnerable to cross-site scripting
|
5.4
Medium
|
May 29, 2019 |
| CVE-2019-4178 |
IBM Cognos Analytics 11 could allow a remote attacker to traverse directories on the system
|
6.4
Medium
|
Apr 15, 2019 |
| CVE-2018-1842 |
IBM Cognos Analytics 11 Configuration tool, under certain circumstances, will bypass OIDC namespace signature…
|
3.6
Low
|
Nov 9, 2018 |
| CVE-2018-1413 |
IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting
|
Not rated
|
May 7, 2018 |
| CVE-2016-9711 |
IBM Predictive Solutions Foundation (IBM Cognos Analytics 11.0) reveals sensitive information in detailed error messages…
|
5.3
Medium
|
Mar 22, 2018 |
| CVE-2017-1779 |
IBM Cognos Analytics 11.0 could store cached credentials locally that could be obtained by a local user
|
Not rated
|
Jan 29, 2018 |
| CVE-2017-1784 |
IBM Cognos Analytics 11.0 could produce results in temporary files that contain highly sensitive information that can be…
|
Not rated
|
Jan 29, 2018 |
| CVE-2017-1783 |
IBM Cognos Analytics 11.0 could allow a local user to change parameters set from the Cognos Analytics menus without…
|
Not rated
|
Jan 29, 2018 |
| CVE-2017-1535 |
IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting
|
Not rated
|
Aug 29, 2017 |
| CVE-2017-1485 |
IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting
|
Not rated
|
Aug 29, 2017 |