Security Bulletin: IBM Security QRadar Network Threat Analytics app for IBM QRadar SIEM includes components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. IBM Security QRadar Network Threat Analytics app for IBM QRadar SIEM has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2024-1135 DESCRIPTION:...

IBM Security QRadar Network Threat Analytics 安全漏洞

IBM Security QRadar Network Threat Analytics is an advanced network security analysis tool from International Business Machines IBM. A resource management error vulnerability exists in IBM Security QRadar Network Threat Analytics version 1.3.1 and prior versions, which stems from a resource...

CVE-2025-36106

IBM Cognos Analytics Mobile iOS 1.1.0 through 1.1.22 could allow malicious actors to view and modify information coming to and from the application which could then be used to access confidential information on the device or network by using a the deprecated or misconfigured AFNetworking library ...

CVE-2025-36106

IBM Cognos Analytics Mobile iOS 1.1.0 through 1.1.22 could allow malicious actors to view and modify information coming to and from the application which could then be used to access confidential information on the device or network by using a the deprecated or misconfigured AFNetworking library ...

CVE-2025-36062

IBM Cognos Analytics Mobile iOS 1.1.0 through 1.1.22 could be vulnerable to information exposure due to the use of unencrypted network traffic...

CVE-2025-36062

IBM Cognos Analytics Mobile iOS 1.1.0 through 1.1.22 could be vulnerable to information exposure due to the use of unencrypted network traffic...

CVE-2025-36057

IBM Cognos Analytics Mobile iOS 1.1.0 through 1.1.22 is vulnerable to authentication bypass by using the Local Authentication Framework library which is not needed as biometric authentication is not used in the application...

CVE-2025-36057

IBM Cognos Analytics Mobile iOS 1.1.0 through 1.1.22 is vulnerable to authentication bypass by using the Local Authentication Framework library which is not needed as biometric authentication is not used in the application...

Security Bulletin: IBM Cognos Analytics Mobile (Android) is affected by a vulnerability in Babel (CVE-2025-27789)

Summary There is a vulnerability in Babel/helpers and Babel/runtime consumed by IBM Cognos Analytics Mobile Android CVE-2025-27789. This Security Bulletin relates only to the direct usage of third-party components by IBM Cognos Analytics Mobile and not any nested dependencies within the product...

Security Bulletin: IBM Cognos Analytics Mobile (iOS) is affected by multiple vulnerabilities

Summary There are vulnerabilities in Babel/helpers and Babel/runtime consumed by IBM Cognos Analytics Mobile iOS. Additionally, IBM Cognos Analytics Mobile iOS is vulnerable to Information Disclosure, Authentication Bypass and Insecure Transmission vulnerabilities. This Security Bulletin relates...

CVE-2025-36107

IBM Cognos Analytics Mobile iOS 1.1.0 through 1.1.22 could allow malicious actors to obtain sensitive information due to the cleartext transmission of data...

CVE-2025-36057 IBM Cognos Analytics Mobile (iOS) authentication bypass

IBM Cognos Analytics Mobile iOS 1.1.0 through 1.1.22 is vulnerable to authentication bypass by using the Local Authentication Framework library which is not needed as biometric authentication is not used in the application...

CVE-2025-36057

IBM Cognos Analytics Mobile (iOS) versions 1.1.0–1.1.22 contain an authentication bypass due to the use of an unnecessary Local Authentication Framework library, despite biometric authentication not being used in the app. The vulnerability affects the iOS client and is described in multiple sourc...

CVE-2025-36057 IBM Cognos Analytics Mobile (iOS) authentication bypass

IBM Cognos Analytics Mobile iOS 1.1.0 through 1.1.22 is vulnerable to authentication bypass by using the Local Authentication Framework library which is not needed as biometric authentication is not used in the application...

CVE-2025-36062 IBM Cognos Analytics Mobile (iOS) information disclosure

IBM Cognos Analytics Mobile iOS 1.1.0 through 1.1.22 could be vulnerable to information exposure due to the use of unencrypted network traffic...

CVE-2025-36062 IBM Cognos Analytics Mobile (iOS) information disclosure

IBM Cognos Analytics Mobile iOS 1.1.0 through 1.1.22 could be vulnerable to information exposure due to the use of unencrypted network traffic...

CVE-2025-36062

CVE-2025-36062 affects IBM Cognos Analytics Mobile (iOS) 1.1.0–1.1.22, with information exposure possible due to unencrypted network traffic. The NVD entry reports a high impact (C開 C:H, I:N, A:N) and CVSS v3.1 base score up to 7.5, while IBM’s bulletin lists additional related vulnerabilities an...

CVE-2025-36106 IBM Cognos Analytics Mobile (iOS) information disclosure

IBM Cognos Analytics Mobile iOS 1.1.0 through 1.1.22 could allow malicious actors to view and modify information coming to and from the application which could then be used to access confidential information on the device or network by using a the deprecated or misconfigured AFNetworking library ...

CVE-2025-36106

CVE-2025-36106 affects IBM Cognos Analytics Mobile (iOS) 1.1.0–1.1.22. The root cause is use of a deprecated/misconfigured AFNetworking library at runtime, enabling an attacker to view and modify information transmitted by the app and potentially access confidential data on the device or network....

CVE-2025-36106 IBM Cognos Analytics Mobile (iOS) information disclosure

IBM Cognos Analytics Mobile iOS 1.1.0 through 1.1.22 could allow malicious actors to view and modify information coming to and from the application which could then be used to access confidential information on the device or network by using a the deprecated or misconfigured AFNetworking library ...