7976 matches found
CVE-2024-28983
Hitachi Vantara Pentaho Business Analytics Server prior to versions 10.1.0.0 and 9.3.0.7, including 8.3.x allow a malicious URL to inject content into the Analyzer plugin interface...
PT-2025-5684 · Ibm · Ibm Cognos Analytics
Name of the Vulnerable Software and Affected Versions: IBM Cognos Analytics versions 11.2.0 through 12.0.4 Description: The issue is related to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this to expose sensitive information or consume...
IBM Cognos Analytics 代码问题漏洞
IBM Cognos Analytics is a suite of business intelligence software from International Business Machines IBM. The software includes reports, dashboards, and scorecards, and can assist companies in adjusting their decision-making by analyzing such things as key factors and key people. A code issue...
CVE-2024-40693
IBM Planning Analytics 2.0 and 2.1 could be vulnerable to malicious file upload by not validating the content of the file uploaded to the web interface. Attackers can make use of this weakness and upload malicious executable files into the system, and it can be sent to victim for performing furth...
CVE-2024-40695
IBM Cognos Analytics 11.2.0 through 11.2.4 FP4 and 12.0.0 through 12.0.4 could be vulnerable to malicious file upload by not validating the content of the file uploaded to the web interface. Attackers can make use of this weakness and upload malicious executable files into the system, and it can ...
CVE-2024-39750
IBM Analytics Content Hub 2.0 is vulnerable to a buffer overflow due to improper return length checking. A remote authenticated attacker could overflow a buffer and execute arbitrary code on the system or cause the server to crash...
CVE-2024-8977
An issue has been discovered in GitLab EE affecting all versions starting from 15.10 prior to 17.2.9, from 17.3 prior to 17.3.5, and from 17.4 prior to 17.4.2. Instances with Product Analytics Dashboard configured and enabled could be vulnerable to SSRF attacks...
Security Bulletin: IBM Planning Analytics Cartridge for IBM Cloud Pak for Data is affected but not considered vulnerable to CVE-2023-45288
Summary IBM Planning Analytics Cartridge for IBM Cloud Pak for Data is affected but not considered vulnerable, based on current information, to CVE-2023-45288 in Golang Go used by the IBM Planning Analytics Engine. This has been resolved by upgrading Golang Go to a non-vulnerable version. This...
Malicious code in analytics-search (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-802 Malicious code in analytics-search (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in analytics-passive-tracker (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-801 Malicious code in analytics-passive-tracker (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-800 Malicious code in analytics-omniture-constants (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in analytics-omniture-constants (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in analytics-merge-beacons (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-799 Malicious code in analytics-merge-beacons (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in analytics-end-of-page (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-798 Malicious code in analytics-end-of-page (npm)
--- -= Per source details. Do not edit below this line.=-...