Known vulnerabilities in Cognos Analytics Mobile (Android) - page 3

Known vulnerabilities in Cognos Analytics Mobile (Android) - page 3

Vendor: IBM Corporation

Software: Cognos Analytics Mobile (Android)

Software CPE: cpe:2.3:a:ibm_corporation:cognos_analytics_mobile_android:*:*:*:*:*:*:*:*

Website: https://www.ibm.com/us-en

Total vulnerabilities: 49

Public exploits: 6

Known exploited (KEV): 1

Breakdown by Severity Chart

Vulnerabilities (49)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU99864 - Improper Certificate Validation CVE-2023-38009	CWE-295	Low	No	No	1.1.20	06.11.2024	SB2024110620 SB2024110829
#VU99863 - Exposure of sensitive information to an unauthorized actor CVE-2022-43383	CWE-200	Low	No	No	1.1.20	06.11.2024	SB2024110620 SB2024110829
#VU99862 - Improper Link Resolution Before File Access ('Link Following') CVE-2022-36943	CWE-59	High	No	No	1.1.20	06.11.2024	SB2024110619 SB2024110620 SB2024110829
#VU94329 - NULL Pointer Dereference CVE-2024-37890	CWE-476	Medium	No	No	1.1.20	15.07.2024	SB2024071508 SB2024071933 SB2024081608 and 32 more
#VU75603 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\') CVE-2023-0842	CWE-1321	Medium	No	No	1.1.20	01.05.2023	SB2023050113 SB2023050917 SB2023052413 and 12 more
#VU69942 - Incorrect Regular Expression CVE-2022-3517	CWE-185	Medium	No	No	1.1.20	06.12.2022	SB2022120638 SB2022120639 SB2022120640 and 50 more
#VU62361 - Improper Control of Generation of Code ('Code Injection') CVE-2021-43138	CWE-94	Medium	No	No	1.1.20	15.04.2022	SB2022041532 SB2022041533 SB2022062103 and 33 more
#VU61670 - Permissions, Privileges, and Access Controls CVE-2022-0144	CWE-264	Low	No	No	1.1.20	28.03.2022	SB2022032842 SB2022032843 SB2024110620 and 4 more
#VU43781 - Improper input validation CVE-2012-2677	CWE-20	Medium	No	No	1.1.20	25.07.2012	SB2012072516 SB2021052604 SB2024040312 and 16 more

Showing elements 41 - 60 out of 49