CA
Product
Cognos Analytics Certified Containers
110
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 6High 24Medium 78Low 2
Watch
Add Cognos Analytics Certified Containers to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-4561 | 10.0 | Jun 1 | IBM Cognos Analytics 11.0 and 11.1 DQM API allows submitting of all control requests in unauthenticated sessions Affected: 11.0.0; 11.1.0 |
| CVE-2021-38945 | 9.8 | Jun 24 | IBM Cognos Analytics 11.2.1, 11.2.0, and 11.1.7 could allow a remote attacker to upload arbitrary files, caused by improper content validation Affected: 11.1.0 before 11.1.7; 11.1.7; 11.1.7; 11.1.7; 11.1.7; 11.1.7; +2 more |
| CVE-2022-38708 | 9.1 | Dec 19 | IBM Cognos Analytics 11.1.7 11.2.0, and 11.2.1 could be vulnerable to a Server-Side Request Forgery Attack (SSRF) attack by constructing URLs from user-controlled data Affected: 11.1.0 through 11.1.7; 11.2.0 through 11.2.3; 11.1.7; 11.1.7; 11.1.7; 11.1.7; +1 more |
| CVE-2020-4377 | 9.1 | Aug 3 | IBM Cognos Anaytics 11.0 and 11.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data Affected: 11.0.0; 11.1.0 |
| CVE-2019-4178 | 9.1 | Apr 15 | IBM Cognos Analytics 11 could allow a remote attacker to traverse directories on the system Affected: 11.0.0.0 through 11.0.13.0 |
| CVE-2024-51466 | 9.0 | Dec 20 | IBM Cognos Analytics expression language injection Affected: 11.2.0 through 11.2.4; 12.0.0 through 12.0.4 |
Showing 6