6 matches found
CVE-2025-33117
CVE-2025-33117 affects IBM QRadar SIEM versions 7.5 through 7.5.0 Update Package 12. A privileged user could modify critical configuration files, enabling the upload of a malicious autoupdate file to execute arbitrary commands. This aligns with IBM’s bulletin noting high-severity impact and a fix...
CVE-2024-51448
IBM Robotic Process Automation 21.0.0 through 21.0.7.17 and 23.0.0 through 23.0.18 could allow a local user to escalate their privileges. All files in the install inherit the file permissions of the parent directory and therefore a non-privileged user can substitute any executable for the nssm.ex...
CVE-2024-25037 IBM Cognos Controller information disclosure
IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow a remote attacker to obtain sensitive information when a stack trace is returned in the browser...
CVE-2015-7435
CVE-2015-7435 affects IBM Tivoli Common Reporting (TCR) used with Cognos BI; a leading-space in the BackURL field can bypass the Cognos Application Firewall (CAF). Affected versions include TCR 2.1 (before IF14) and 2.1.1 (before IF22), 2.1.1.2 (before IF9), and 3.1.0.0–3.1.2 (as used in Cognos B...