CA
Product
Cognos Analytics Certified Containers
110
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 6High 24Medium 78Low 2
Watch
Add Cognos Analytics Certified Containers to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-1535 | 5.4 | Aug 29 | IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting Affected: 11.0.0; 11.0.1; 11.0.2; 11.0.3; 11.0.4; 11.0.5; +1 more |
| CVE-2017-1485 | 5.4 | Aug 29 | IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting Affected: 11.0.0; 11.0.1; 11.0.2; 11.0.3; 11.0.4; 11.0.5; +1 more |
| CVE-2016-3032 | 5.4 | May 10 | IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting Affected: 11.0.0; 11.0.1; 11.0.2; 11.0.3; 11.0.4; 11.0.5; +1 more |
| CVE-2016-3031 | 5.4 | Apr 5 | IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting Affected: 11.0.0; 11.0.1; 11.0.2; 11.0.3; 11.0.4 |
| CVE-2016-3015 | 5.4 | Apr 5 | IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting Affected: 11.0.0; 11.0.1; 11.0.2; 11.0.3; 11.0.4 |
| CVE-2016-0217 | 5.4 | Feb 1 | IBM Cognos Business Intelligence and IBM Cognos Analytics are vulnerable to stored cross-site scripting, caused by improper validation of user-supplied input Affected: 11.0.0; 11.0.1; 11.0.2; 11.0.3; 11.0.4 |
| CVE-2025-33150 | 5.3 | Nov 10 | IBM Cognos Analytics Certified Containers information disclosure Affected: 12.1.0 |
| CVE-2025-0923 | 5.3 | Jun 11 | IBM Cognos Analytics information disclosure Affected: 11.2.0; 11.2.1; 11.2.2; 11.2.3; 11.2.4; 12.0.0; +4 more |
| CVE-2023-30996 | 5.3 | Feb 26 | IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 could be vulnerable to information leakage due to unverified sources in messages sent between Windows objects of different origins Affected: 11.1.1 before 11.1.7; 11.2.0 before 11.2.4; 11.1.7; 11.1.7; 11.1.7; 11.1.7; +9 more |
| CVE-2023-35009 | 5.3 | Aug 16 | IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could allow a remote attacker to obtain system information without authentication which could be used in reconnaissance to gather… Affected: 11.1.0 before 11.1.7; 11.2.0 before 11.2.4; 11.1.7; 11.1.7; 11.1.7; 11.1.7; +8 more |
| CVE-2022-43887 | 5.3 | Dec 19 | IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could be vulnerable to sensitive information exposure by passing API keys to log files Affected: 11.1.0 before 11.1.7; 11.2.0 through 11.2.3; 11.1.7; 11.1.7; 11.1.7; 11.1.7; +2 more |
| CVE-2021-29719 | 5.3 | Dec 3 | IBM Cognos Analytics 11.1.7 and 11.2.0 could be vulnerable to client side vulnerabilties due to a web response specifying an incorrect content type Affected: 11.1.0 before 11.1.7; 11.1.7; 11.1.7; 11.1.7; 11.1.7; 11.2.0 |
| CVE-2019-4366 | 5.3 | Aug 3 | IBM Cognos Analytics 11.0 and 11.1 is susceptible to an information disclosure vulnerability where an attacker could gain access to cached browser data Affected: 11.0.0; 11.1.0 |
| CVE-2016-9711 | 5.3 | Mar 22 | IBM Predictive Solutions Foundation (IBM Cognos Analytics 11.0) reveals sensitive information in detailed error messages that could aid an attacker in further attacks against the… Affected: 11.0.0 |
| CVE-2024-45082 | 5.2 | Dec 18 | IBM Cognos Analytics HTTP open redirection Affected: 11.2.0 through 11.2.4; 12.0.0 through 12.0.3 |
| CVE-2025-0917 | 4.8 | Jun 11 | IBM Cognos Analytics cross-site scripting Affected: 11.2.0; 11.2.1; 11.2.2; 11.2.3; 11.2.4; 12.0.0; +4 more |
| CVE-2025-36076 | 4.3 | Sep 18 | IBM Cognos Analytics versions 12.0.4 and 12.1.3 is affected by security vulnerabilities Affected: 12.1.0 through 12.1.3 FP1; 12.0.4 through 12.0.4 FP2 |
| CVE-2023-32344 | 4.3 | Feb 26 | IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 is vulnerable to form action hijacking where it is possible to modify the form action to reference an arbitrary path Affected: 11.1.1 before 11.1.7; 11.2.0 before 11.2.4; 11.1.7; 11.1.7; 11.1.7; 11.1.7; +9 more |
| CVE-2021-38905 | 4.3 | Apr 22 | IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 could allow an authenticated user to view report pages that they should not have access to Affected: 11.1.7; 11.2.0; 11.2.1 |
| CVE-2021-29824 | 4.3 | Apr 22 | IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to priviledge escalation where a lower level user could have read access to to the 'Data Connections' page to which… Affected: 11.1.7; 11.2.0; 11.2.1 |
| CVE-2019-4722 | 4.3 | Jun 1 | IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information via a stack trace due to mishandling of certain error conditions Affected: 11.0.0; 11.1.0 |
| CVE-2019-4589 | 4.3 | Aug 3 | IBM Cognos Analytics 11.0 and 11.1 is vulnerable to privlege escalation where the "My schedules and subscriptions" page is visible and accessible to a less privileged user Affected: 11.0.0; 11.1.0 |
| CVE-2019-4729 | 4.3 | Apr 27 | IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser Affected: 11.0.0.0 before 11.0.13; 11.1.0 before 11.1.6 |
| CVE-2019-4231 | 4.3 | Dec 20 | IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user… Affected: 11.0.0 through 11.0.12; 11.1.0 before 11.1.4.0; 11.0.13; 11.0.13; 11.0.13 |
| CVE-2019-4334 | 4.3 | Nov 9 | IBM Cognos Analytics 11.0 and 11.1 could reveal sensitive information to an authenticated user that could be used in future attacks against the system Affected: 11.0.0; 11.1.0 |
| CVE-2016-0398 | 4.3 | Jul 2 | IBM Cognos Analytics (CA) 11.0 before 11.0.2 allows remote attackers to conduct content-spoofing attacks via a crafted URL Affected: 11.0.0 |
| CVE-2026-15995 | 4.2 | Jul 17 | IBM Cognos Analytics 12.1.3 general availability package contains a data integrity issue in the Agentic AI assistant that may cause incorrect report summaries or report-processing errors under concurrent use Affected: 12.1.3 GA Version with build number through 12.1.3-2606251736 |
| CVE-2017-1783 | 4.0 | Jan 29 | IBM Cognos Analytics 11.0 could allow a local user to change parameters set from the Cognos Analytics menus without proper authentication Affected: 11.0.0; 11.0.1; 11.0.2; 11.0.3; 11.0.4; 11.0.5.0; +2 more |