Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
IbmCognos Analytics

27 matches found

CVE
CVE•added 2019/11/09 2:15 a.m.•139 views

CVE-2019-4645

IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 170881.

6.1CVSS6AI score0.00329EPSS
CVE
CVE•added 2024/02/26 4:27 p.m.•131 views

CVE-2022-34357

IBM Cognos Analytics Mobile Server 11.1.7, 11.2.4, and 12.0.0 is vulnerable to Denial of Service due to due to weak or absence of rate limiting. By making unlimited http requests, it is possible for a single user to exhaust server resources over a period of time making service unavailable for other...

6.5CVSS6.3AI score0.00094EPSS
CVE
CVE•added 2024/02/26 4:27 p.m.•86 views

CVE-2023-38359

IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 26...

6.1CVSS5.8AI score0.00114EPSS
CVE
CVE•added 2022/04/22 5:15 p.m.•85 views

CVE-2021-20464

IBM Cognos Analytics PowerPlay (IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7) could be vulnerable to an XML Bomb attack by a malicious authenticated user. IBM X-Force ID: 196813.

6.5CVSS6.7AI score0.00326EPSS
CVE
CVE•added 2022/06/24 4:15 p.m.•73 views

CVE-2021-39047

IBM Planning Analytics 2.0 and IBM Cognos Analytics 11.2.1, 11.2.0, and 11.1.7 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a tru...

6.1CVSS5.9AI score0.00315EPSS
CVE
CVE•added 2022/04/22 5:15 p.m.•71 views

CVE-2021-38904

IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 could allow a remote attacker to obtain credentials from a user's browser via incorrect autocomplete settings. IBM X-Force ID: 209693.

6.5CVSS6.8AI score0.00274EPSS
CVE
CVE•added 2022/11/03 8:15 p.m.•66 views

CVE-2022-34339

"IBM Cognos Analytics 11.2.1, 11.2.0, 11.1.7 stores user credentials in plain clear text which can be read by an authenticated user. IBM X-Force ID: 229963."

6.5CVSS6AI score0.00048EPSS
CVE
CVE•added 2022/12/19 9:15 p.m.•66 views

CVE-2022-39160

IBM Cognos Analytics 11.2.1, 11.2.0, and 11.1.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 23...

6.1CVSS5.8AI score0.00089EPSS
CVE
CVE•added 2022/09/01 7:15 p.m.•61 views

CVE-2021-29823

IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 204465.

6.5CVSS6.4AI score0.0024EPSS
CVE
CVE•added 2022/06/24 4:15 p.m.•58 views

CVE-2021-29768

IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could allow a low level user to obtain sensitive information from the details of the 'Cloud Storage' page for which they should not have access. IBM X-Force ID: 202682.

6.5CVSS6.1AI score0.00159EPSS
CVE
CVE•added 2022/09/01 7:15 p.m.•52 views

CVE-2021-20468

IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 196825.

6.5CVSS6.4AI score0.00072EPSS
CVE
CVE•added 2022/09/01 7:15 p.m.•49 views

CVE-2021-39045

IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could allow a local attacker to obtain information due to the autocomplete feature on password input fields. IBM X-Force ID: 214345.

6.2CVSS5.2AI score0.00071EPSS
CVE
CVE•added 2021/06/30 2:15 p.m.•47 views

CVE-2021-20461

IBM Cognos Analytics 10.0 and 11.1 is susceptible to a weakness in the implementation of the System Appearance configuration setting. An attacker could potentially bypass business logic to modify the appearance and behavior of the application. IBM X-Force ID: 196770.

6.5CVSS6.8AI score0.00193EPSS
CVE
CVE•added 2025/02/28 3:15 a.m.•47 views

CVE-2025-0823

IBM Cognos Analytics 11.2.0 through 11.2.4 FP5 and 12.0.0 through 12.0.4 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.

6.5CVSS6.4AI score0.00077EPSS
CVE
CVE•added 2021/12/03 5:15 p.m.•45 views

CVE-2021-29716

IBM Cognos Analytics 11.1.7 and 11.2.0 could allow a low level user to reas of the application that privileged user should only be allowed to view. IBM X-Force ID: 201087.

6.5CVSS6.3AI score0.00361EPSS
CVE
CVE•added 2019/12/30 4:15 p.m.•44 views

CVE-2019-4343

IBM Cognos Analytics 11.0 and 11.1 allows overly permissive cross-origin resource sharing which could allow an attacker to transfer private information. An attacker could exploit this vulnerability to access content that should be restricted. IBM X-Force ID: 161422.

6.5CVSS6.4AI score0.00286EPSS
CVE
CVE•added 2022/09/01 7:15 p.m.•44 views

CVE-2020-4301

IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 176609.

6.5CVSS6.4AI score0.00072EPSS
CVE
CVE•added 2024/12/18 5:15 p.m.•43 views

CVE-2024-25042

IBM Cognos Analytics 11.2.0 through 11.2.4 and 12.0.0 through 12.0.3 is potentially vulnerable to Cross Site Scripting (XSS). A remote attacker could execute malicious commands due to improper validation of column headings in Cognos Explorations.

6.1CVSS5.6AI score0.00032EPSS
CVE
CVE•added 2023/05/12 1:15 a.m.•42 views

CVE-2021-39036

IBM Cognos Analytics 11.1 and 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 213966.

6.1CVSS5.8AI score0.00153EPSS
CVE
CVE•added 2025/02/28 3:15 a.m.•42 views

CVE-2024-56340

IBM Cognos Analytics 11.2.0 through 11.2.4 FP5 is vulnerable to local file inclusion vulnerability, allowing an attacker to access sensitive files by inserting path traversal payloads inside the deficon parameter.

6.5CVSS6.6AI score0.00537EPSS
CVE
CVE•added 2024/12/18 5:15 p.m.•41 views

CVE-2024-41752

IBM Cognos Analytics 11.2.0 through 11.2.4 and 12.0.0 through 12.0.3 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.

6.1CVSS5.6AI score0.00027EPSS
CVE
CVE•added 2024/12/18 5:15 p.m.•40 views

CVE-2024-45082

IBM Cognos Analytics 11.2.0 through 11.2.4 and 12.0.0 through 12.0.3 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed ...

6.8CVSS6.5AI score0.00017EPSS
CVE
CVE•added 2017/08/29 9:29 p.m.•39 views

CVE-2017-1427

IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 127579.

6.1CVSS6AI score0.00285EPSS
CVE
CVE•added 2021/12/03 5:15 p.m.•39 views

CVE-2021-20493

IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 197794.

6.1CVSS5.9AI score0.00325EPSS
CVE
CVE•added 2017/08/29 9:29 p.m.•38 views

CVE-2017-1428

IBM Cognos Analytics 11.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. ...

6.1CVSS6.7AI score0.00257EPSS
CVE
CVE•added 2021/06/01 2:15 p.m.•37 views

CVE-2019-4471

IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information, caused by the failure to set the secure flag for a sensitive cookie in an HTTPS session. A remote attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force ID: 163780.

6.5CVSS6.7AI score0.00116EPSS
CVE
CVE•added 2025/06/28 1:15 a.m.•14 views

CVE-2024-52900

IBM Cognos Analytics 11.2.0 through 12.2.4 Fix Pack 5 and 12.0.0 through 12.0.4 is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials di...

6.4CVSS5.8AI score0.00027EPSS