Lucene search
HistoryFeb 26, 2024 - 4:27 p.m.
CVE-2023-32344
ibm
cognos analytics
form action hijacking
vulnerability
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
AI Score
5.6
Confidence
High
EPSS
0
Percentile
15.5%
IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 is vulnerable to form action hijacking where it is possible to modify the form action to reference an arbitrary path. IBM X-Force ID: 255898.
Related
cvelist
cvelist
CVE-2023-32344 IBM Cognos Analytics cross-site request forgery
2024-02-24 15:29:33
cve
cve
CVE-2023-32344
2024-02-26 16:27:46
vulnrichment
vulnrichment
CVE-2023-32344 IBM Cognos Analytics cross-site request forgery
2024-02-24 15:29:33
prion
prion
Design/Logic Flaw
2024-02-26 16:27:00
ibm
ibm
nessus
nessus
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
AI Score
5.6
Confidence
High
EPSS
0
Percentile
15.5%
Related for NVD:CVE-2023-32344