Known vulnerabilities in Cognos Analytics Mobile (iOS)

Vendor: IBM Corporation
Software: Cognos Analytics Mobile (iOS)
Software CPE: cpe:2.3:a:ibm_corporation:cognos_analytics_mobile_ios:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 48
Public exploits: 6
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cognos Analytics Mobile (iOS) Cognos Analytics Mobile (iOS) is affected by 48 known vulnerabilities: 1 critical, 2 high, 34 medium, 11 low Critical High Medium Low

Vulnerabilities (48)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU126616 - Improper Validation of Specified Quantity in Input
CVE-2026-33349		 CWE-1284 Medium
No
No
 1.1.26 20.04.2026 SB20260420117
SB2026052512
SB2026052624
#VU126615 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
CVE-2026-33036		 CWE-776 Medium
No
No
 1.1.26 20.04.2026 SB20260420117
SB2026052512
SB2026052624
and 2 more
#VU126614 - Improper input validation
CVE-2026-27942		 CWE-20 Low
No
No
 1.1.26 20.04.2026 SB20260420116
SB2026052512
SB2026052624
and 2 more
#VU123140 - Inefficient Regular Expression Complexity
CVE-2026-26996		 CWE-1333 Medium
No
No
 1.1.26 23.02.2026 SB2026022345
SB2026030633
SB2026032328
and 31 more
#VU123128 - Incorrect Regular Expression
CVE-2026-25896		 CWE-185 Medium
Available
No
 1.1.26 23.02.2026 SB2026022328
SB2026031935
SB2026040116
and 5 more
#VU123126 - NULL Pointer Dereference
CVE-2026-26278		 CWE-476 Medium
Available
No
 1.1.26 23.02.2026 SB2026022326
SB2026031935
SB2026040225
and 4 more
#VU122452 - Improper Check for Unusual or Exceptional Conditions
CVE-2026-25639		 CWE-754 Medium
Available
No
 1.1.26 09.02.2026 SB2026020914
SB2026022201
SB2026022202
and 23 more
#VU122262 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-11953		 CWE-78 Critical
Available
Exploited
 1.1.26 03.02.2026 SB2026020357
SB2026052512
#VU119133 - Integer overflow
CVE-2025-66030		 CWE-190 Medium
No
No
 1.1.26 04.12.2025 SB2025120419
SB2025122219
SB2026012115
and 9 more
#VU119132 - Uncontrolled Recursion
CVE-2025-66031		 CWE-674 Medium
No
No
 1.1.26 04.12.2025 SB2025120419
SB2025120930
SB20251210178
and 15 more
#VU119131 - Interpretation Conflict
CVE-2025-12816		 CWE-436 Medium
No
No
 1.1.26 04.12.2025 SB2025120419
SB2025122219
SB20260116128
and 19 more
#VU105338 - Inclusion of Sensitive Information in Source Code
CVE-2024-55907		 CWE-540 Low
No
No
 1.1.21 05.03.2025 SB2025030534
#VU99563 - Improper Verification of Cryptographic Signature
CVE-2024-48948		 CWE-347 Low
No
No
 1.1.21 31.10.2024 SB2024103162
SB2024103166
SB2024110115
and 18 more
#VU98131 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43800		 CWE-79 Medium
No
No
 1.1.21 08.10.2024 SB2024100821
SB2024100824
SB2024100825
and 48 more
#VU97768 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43799		 CWE-79 Low
No
No
 1.1.21 30.09.2024 SB2024093022
SB2024100824
SB2024100825
and 50 more
#VU97606 - Improper Verification of Cryptographic Signature
CVE-2024-42459		 CWE-347 Medium
No
No
 1.1.21 19.09.2024 SB2024091934
SB2024091939
SB2024092062
and 23 more
#VU97605 - Improper Verification of Cryptographic Signature
CVE-2024-42460		 CWE-347 Medium
No
No
 1.1.21 19.09.2024 SB2024091934
SB2024091939
SB2024092062
and 24 more
#VU97604 - Improper Verification of Cryptographic Signature
CVE-2024-42461		 CWE-347 Medium
No
No
 1.1.21 19.09.2024 SB2024091934
SB2024091939
SB2024092062
and 24 more
#VU96970 - Resource exhaustion
CVE-2024-43398		 CWE-400 Medium
No
No
 1.1.20 10.09.2024 SB2024091006
SB2024091007
SB2024091008
and 28 more
#VU75603 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2023-0842		 CWE-1321 Medium
No
No
 1.1.20 01.05.2023 SB2023050113
SB2023050917
SB2023052413
and 12 more


Showing elements 1 - 20 out of 48