| CVE-2020-4388 |
IBM Cognos Analytics 11.0 and 11.1 could be vulnerable to a denial of service attack by failing to catch exceptions in a…
|
6.5
Moyenne
|
12 oct. 2020 |
| CVE-2020-4302 |
IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to execute arbitrary code on the system, caused by a…
|
5.5
Moyenne
|
12 oct. 2020 |
| CVE-2020-4377 |
IBM Cognos Anaytics 11.0 and 11.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML…
|
8.2
Élevée
|
3 août 2020 |
| CVE-2019-4589 |
IBM Cognos Analytics 11.0 and 11.1 is vulnerable to privlege escalation where the "My schedules and subscriptions"…
|
4.6
Moyenne
|
3 août 2020 |
| CVE-2019-4366 |
IBM Cognos Analytics 11.0 and 11.1 is susceptible to an information disclosure vulnerability where an attacker could…
|
2.9
Faible
|
3 août 2020 |
| CVE-2019-4729 |
IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information when a detailed…
|
4.3
Moyenne
|
27 avr. 2020 |
| CVE-2019-4623 |
IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting
|
5.4
Moyenne
|
30 déc. 2019 |
| CVE-2019-4343 |
IBM Cognos Analytics 11.0 and 11.1 allows overly permissive cross-origin resource sharing which could allow an…
|
6.5
Moyenne
|
30 déc. 2019 |
| CVE-2019-4555 |
IBM Cognos Analytics 11.0 and 11.0 is vulnerable to cross-site scripting
|
5.4
Moyenne
|
20 déc. 2019 |
| CVE-2019-4231 |
IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site request forgery which could allow an attacker to…
|
4.3
Moyenne
|
20 déc. 2019 |
| CVE-2019-4645 |
IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting
|
6.1
Moyenne
|
9 nov. 2019 |
| CVE-2019-4334 |
IBM Cognos Analytics 11.0 and 11.1 could reveal sensitive information to an authenticated user that could be used in…
|
4.3
Moyenne
|
9 nov. 2019 |
| CVE-2018-1721 |
IBM Cognos Analytics 11.0 and 11.1 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML…
|
8.3
Élevée
|
9 nov. 2019 |
| CVE-2019-4342 |
IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting
|
5.4
Moyenne
|
17 sept. 2019 |
| CVE-2019-4183 |
IBM Cognos Analytics 11.0, and 11.1 is vulnerable to a denial of service attack that could allow a remote user to send…
|
5.9
Moyenne
|
17 sept. 2019 |
| CVE-2019-4139 |
IBM Cognos Analytics 11.0, 11.1.0, and 11.1.1 is vulnerable to cross-site scripting
|
5.4
Moyenne
|
29 mai 2019 |
| CVE-2019-4178 |
IBM Cognos Analytics 11 could allow a remote attacker to traverse directories on the system
|
6.4
Moyenne
|
15 avr. 2019 |
| CVE-2018-1842 |
IBM Cognos Analytics 11 Configuration tool, under certain circumstances, will bypass OIDC namespace signature…
|
3.6
Faible
|
9 nov. 2018 |
| CVE-2018-1413 |
IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting
|
Non notée
|
7 mai 2018 |
| CVE-2016-9711 |
IBM Predictive Solutions Foundation (IBM Cognos Analytics 11.0) reveals sensitive information in detailed error messages…
|
5.3
Moyenne
|
22 mars 2018 |
| CVE-2017-1779 |
IBM Cognos Analytics 11.0 could store cached credentials locally that could be obtained by a local user
|
Non notée
|
29 janv. 2018 |
| CVE-2017-1784 |
IBM Cognos Analytics 11.0 could produce results in temporary files that contain highly sensitive information that can be…
|
Non notée
|
29 janv. 2018 |
| CVE-2017-1783 |
IBM Cognos Analytics 11.0 could allow a local user to change parameters set from the Cognos Analytics menus without…
|
Non notée
|
29 janv. 2018 |
| CVE-2017-1535 |
IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting
|
Non notée
|
29 août 2017 |
| CVE-2017-1485 |
IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting
|
Non notée
|
29 août 2017 |