| CVE-2023-30996 |
IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 could be vulnerable to information leakage due to unverified sources…
|
5.3
Moyenne
|
24 févr. 2024 |
| CVE-2023-32344 |
IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 is vulnerable to form action hijacking where it is possible to modify…
|
4.3
Moyenne
|
24 févr. 2024 |
| CVE-2023-38359 |
IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 is vulnerable to cross-site scripting
|
6.1
Moyenne
|
24 févr. 2024 |
| CVE-2023-35011 |
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to server-side request forgery (SSRF)
|
5.4
Moyenne
|
16 août 2023 |
| CVE-2023-35009 |
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could allow a remote attacker to obtain system information without…
|
5.3
Moyenne
|
16 août 2023 |
| CVE-2023-28530 |
IBM Cognos Analytics 11.1 and 11.2 is vulnerable to stored cross-site scripting, caused by improper validation of SVG…
|
5.4
Moyenne
|
22 juil. 2023 |
| CVE-2023-25929 |
IBM Cognos Analytics 11.1 and 11.2 is vulnerable to cross-site scripting
|
4.6
Moyenne
|
22 juil. 2023 |
| CVE-2021-39036 |
IBM Cognos Analytics 11.1 and 11.2 is vulnerable to cross-site scripting
|
6.1
Moyenne
|
12 mai 2023 |
| CVE-2022-39160 |
IBM Cognos Analytics 11.2.1, 11.2.0, and 11.1.7 is vulnerable to cross-site scripting
|
6.1
Moyenne
|
19 déc. 2022 |
| CVE-2022-43883 |
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could be vulnerable to a Log Injection attack by constructing URLs…
|
6.5
Moyenne
|
19 déc. 2022 |
| CVE-2022-43887 |
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could be vulnerable to sensitive information exposure by passing API…
|
5.3
Moyenne
|
19 déc. 2022 |
| CVE-2022-38708 |
IBM Cognos Analytics 11.1.7 11.2.0, and 11.2.1 could be vulnerable to a Server-Side Request Forgery Attack (SSRF) attack…
|
6.5
Moyenne
|
19 déc. 2022 |
| CVE-2022-36773 |
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to an XML External Entity Injection (XXE) attack when…
|
7.1
Élevée
|
1 sept. 2022 |
| CVE-2022-30614 |
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to a denial of service via email flooding caused by…
|
6.5
Moyenne
|
1 sept. 2022 |
| CVE-2021-39045 |
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could allow a local attacker to obtain information due to the…
|
6.2
Moyenne
|
1 sept. 2022 |
| CVE-2021-39009 |
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 stores user credentials in plain clear text which can be read by a local…
|
4.4
Moyenne
|
1 sept. 2022 |
| CVE-2021-29823 |
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to cross-site request forgery which could allow an…
|
4.3
Moyenne
|
1 sept. 2022 |
| CVE-2021-20468 |
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to cross-site request forgery which could allow an…
|
4.3
Moyenne
|
1 sept. 2022 |
| CVE-2020-4301 |
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to cross-site request forgery which could allow an…
|
4.3
Moyenne
|
1 sept. 2022 |
| CVE-2021-39047 |
IBM Planning Analytics 2.0 and IBM Cognos Analytics 11.2.1, 11.2.0, and 11.1.7 are vulnerable to cross-site scripting
|
6.1
Moyenne
|
24 juin 2022 |
| CVE-2021-38945 |
IBM Cognos Analytics 11.2.1, 11.2.0, and 11.1.7 could allow a remote attacker to upload arbitrary files, caused by…
|
6.3
Moyenne
|
24 juin 2022 |
| CVE-2021-29768 |
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could allow a low level user to obtain sensitive information from the…
|
4.3
Moyenne
|
24 juin 2022 |
| CVE-2021-38946 |
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to cross-site scripting
|
5.4
Moyenne
|
22 avr. 2022 |
| CVE-2021-38905 |
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 could allow an authenticated user to view report pages that they…
|
4.3
Moyenne
|
22 avr. 2022 |
| CVE-2021-38904 |
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 could allow a remote attacker to obtain credentials from a user's…
|
4.6
Moyenne
|
22 avr. 2022 |