CVE-2021-38886

IBM Cognos Analytics is affected by CVE-2021-38886: cross-site request forgery that could allow a trusted-user action to be executed by an attacker. The vulnerability affects IBM Cognos Analytics 11.2.x and 11.1.x (notably 11.2.x and 11.1.x lines cited in sources). Remediation is available: IBM C...

CVE-2021-38886: Cross-Site Request Forgery (CSRF)

IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 209399...