| CVE-2021-38903 |
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to cross-site scripting, caused by improper validation…
|
5.4
Moyenne
|
22 avr. 2022 |
| CVE-2021-38886 |
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to cross-site request forgery which could allow an…
|
4.3
Moyenne
|
22 avr. 2022 |
| CVE-2021-29824 |
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to priviledge escalation where a lower level user could…
|
3.1
Faible
|
22 avr. 2022 |
| CVE-2021-20464 |
IBM Cognos Analytics PowerPlay (IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7) could be vulnerable to an XML Bomb…
|
6.5
Moyenne
|
22 avr. 2022 |
| CVE-2021-38909 |
IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site scripting
|
5.4
Moyenne
|
3 déc. 2021 |
| CVE-2021-29867 |
IBM Cognos Analytics 11.1.7 and 11.2.0 could allow an authenticated to view or edit a Jupyter notebook that they…
|
5.4
Moyenne
|
3 déc. 2021 |
| CVE-2021-29756 |
IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site request forgery (CSRF) in the My Inbox page which…
|
4.3
Moyenne
|
3 déc. 2021 |
| CVE-2021-29719 |
IBM Cognos Analytics 11.1.7 and 11.2.0 could be vulnerable to client side vulnerabilties due to a web response…
|
5.3
Moyenne
|
3 déc. 2021 |
| CVE-2021-29716 |
IBM Cognos Analytics 11.1.7 and 11.2.0 could allow a low level user to reas of the application that privileged user…
|
2.7
Faible
|
3 déc. 2021 |
| CVE-2021-20493 |
IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site scripting
|
6.1
Moyenne
|
3 déc. 2021 |
| CVE-2021-20470 |
IBM Cognos Analytics 11.1.7 and 11.2.0 does not require that users should have strong passwords by default, which…
|
5.9
Moyenne
|
3 déc. 2021 |
| CVE-2021-29745 |
IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to priviledge escalation where a lower evel user could have…
|
5.4
Moyenne
|
15 oct. 2021 |
| CVE-2021-29679 |
IBM Cognos Analytics 11.1.7 and 11.2.0 could allow an authenticated user to execute code remotely due to incorrectly…
|
8.8
Élevée
|
15 oct. 2021 |
| CVE-2020-4951 |
IBM Cognos Analytics 11.1.7 and 11.2.0 contains locally cached browser data, that could allow a local attacker to obtain…
|
4.0
Moyenne
|
15 oct. 2021 |
| CVE-2021-20461 |
IBM Cognos Analytics 10.0 and 11.1 is susceptible to a weakness in the implementation of the System Appearance…
|
4.3
Moyenne
|
30 juin 2021 |
| CVE-2020-4561 |
IBM Cognos Analytics 11.0 and 11.1 DQM API allows submitting of all control requests in unauthenticated sessions
|
10.0
Critique
|
31 mai 2021 |
| CVE-2020-4520 |
IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to inject malicious HTML code that when viewed by the…
|
7.1
Élevée
|
31 mai 2021 |
| CVE-2020-4354 |
IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting
|
5.4
Moyenne
|
31 mai 2021 |
| CVE-2020-4300 |
IBM Cognos Analytics 11.0 and 11.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML…
|
8.2
Élevée
|
31 mai 2021 |
| CVE-2019-4730 |
IBM Cognos Analytics 11.0 and 11.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML…
|
7.1
Élevée
|
31 mai 2021 |
| CVE-2019-4724 |
IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain credentials from a user's browser via…
|
4.6
Moyenne
|
31 mai 2021 |
| CVE-2019-4723 |
IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain credentials from a user's browser via…
|
4.6
Moyenne
|
31 mai 2021 |
| CVE-2019-4722 |
IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information via a stack trace due…
|
4.3
Moyenne
|
31 mai 2021 |
| CVE-2019-4653 |
IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting
|
5.4
Moyenne
|
31 mai 2021 |
| CVE-2019-4471 |
IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information, caused by the…
|
5.3
Moyenne
|
31 mai 2021 |