CA
Product
Cognos Analytics Certified Containers
110
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 6High 24Medium 78Low 2
Watch
Add Cognos Analytics Certified Containers to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-4722 | 4.3 | Jun 1 | IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information via a stack trace due to mishandling of certain error conditions Affected: 11.0.0; 11.1.0 |
| CVE-2019-4589 | 4.3 | Aug 3 | IBM Cognos Analytics 11.0 and 11.1 is vulnerable to privlege escalation where the "My schedules and subscriptions" page is visible and accessible to a less privileged user Affected: 11.0.0; 11.1.0 |
| CVE-2019-4729 | 4.3 | Apr 27 | IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser Affected: 11.0.0.0 before 11.0.13; 11.1.0 before 11.1.6 |
| CVE-2019-4231 | 4.3 | Dec 20 | IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user… Affected: 11.0.0 through 11.0.12; 11.1.0 before 11.1.4.0; 11.0.13; 11.0.13; 11.0.13 |
| CVE-2019-4334 | 4.3 | Nov 9 | IBM Cognos Analytics 11.0 and 11.1 could reveal sensitive information to an authenticated user that could be used in future attacks against the system Affected: 11.0.0; 11.1.0 |
| CVE-2016-0398 | 4.3 | Jul 2 | IBM Cognos Analytics (CA) 11.0 before 11.0.2 allows remote attackers to conduct content-spoofing attacks via a crafted URL Affected: 11.0.0 |
| CVE-2026-15995 | 4.2 | Jul 17 | IBM Cognos Analytics 12.1.3 general availability package contains a data integrity issue in the Agentic AI assistant that may cause incorrect report summaries or report-processing errors under concurrent use Affected: 12.1.3 GA Version with build number through 12.1.3-2606251736 |
| CVE-2017-1783 | 4.0 | Jan 29 | IBM Cognos Analytics 11.0 could allow a local user to change parameters set from the Cognos Analytics menus without proper authentication Affected: 11.0.0; 11.0.1; 11.0.2; 11.0.3; 11.0.4; 11.0.5.0; +2 more |
| CVE-2018-1842 | 3.6 | Nov 9 | IBM Cognos Analytics 11 Configuration tool, under certain circumstances, will bypass OIDC namespace signature verification on its id_token Affected: 11.0.0.0 through 11.0.12.0 |
| CVE-2020-4951 | 3.3 | Oct 15 | IBM Cognos Analytics 11.1.7 and 11.2.0 contains locally cached browser data, that could allow a local attacker to obtain sensitive information Affected: 11.1.7; 11.2.0 |