Known vulnerabilities in Cognos Transformer
Vendor:
IBM Corporation
Software:
Cognos Transformer
Software CPE:
cpe:2.3:a:ibm_corporation:cognos_transformer:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
53
Public exploits:
3
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (53)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU105715 - Out-of-bounds write CVE-2025-27363 |
CWE-787 | Critical | 11.2.4 IF5, 12.0.4 IF3, 12.1.0 iF1 | 14.03.2025 |
SB2025031402 SB2025031502 SB2025031750 and 97 more |
||
| #VU101344 - Integer overflow CVE-2024-10917 |
CWE-190 | Low | 11.2.4 FP 6, 12.0.4 FP 1 | 09.12.2024 |
SB2024120927 SB2024120928 SB2024120929 and 66 more |
||
| #VU98644 - Improper input validation CVE-2024-21235 |
CWE-20 | Medium | 11.2.4 FP 6, 12.0.4 FP 1 | 15.10.2024 |
SB20241015214 SB20241015215 SB20241015216 and 129 more |
||
| #VU98645 - Improper input validation CVE-2024-21210 |
CWE-20 | Low | 11.2.4 FP 6, 12.0.4 FP 1 | 15.10.2024 |
SB20241015215 SB2024101668 SB2024101672 and 122 more |
||
| #VU98647 - Improper input validation CVE-2024-21208 |
CWE-20 | Low | 11.2.4 FP 6, 12.0.4 FP 1 | 15.10.2024 |
SB20241015214 SB20241015215 SB20241015216 and 139 more |
||
| #VU98648 - Improper input validation CVE-2024-21217 |
CWE-20 | Low | 11.2.4 FP 6, 12.0.4 FP 1 | 15.10.2024 |
SB20241015214 SB20241015215 SB20241015216 and 142 more |
||
| #VU97226 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2024-27267 |
CWE-362 | Medium | 11.2.4 FP 6, 12.0.4 FP 1 | 12.09.2024 |
SB2024091291 SB2024091292 SB2024091618 and 57 more |
||
| #VU94556 - Improper input validation CVE-2024-21145 |
CWE-20 | Medium | 11.2.4 FP 6, 12.0.4 FP 1 | 18.07.2024 |
SB20240718154 SB20240718155 SB20240718156 and 130 more |
||
| #VU94558 - Improper input validation CVE-2024-21144 |
CWE-20 | Low | 11.2.4 FP 6, 12.0.4 FP 1 | 18.07.2024 |
SB20240718154 SB20240718155 SB20240718192 and 114 more |
||
| #VU94559 - Improper input validation CVE-2024-21131 |
CWE-20 | Low | 11.2.4 FP 6, 12.0.4 FP 1 | 18.07.2024 |
SB20240718154 SB20240718155 SB20240718156 and 135 more |
||
| #VU89343 - Resource exhaustion CVE-2023-38264 |
CWE-400 | Medium | 11.2.4 FP5, 12.0.4 | 10.05.2024 |
SB2024051027 SB2024051417 SB2024052007 and 70 more |
||
| #VU89221 - Insufficient Verification of Data Authenticity CVE-2024-34447 |
CWE-345 | Medium | 11.2.4 FP5, 12.0.4 | 07.05.2024 |
SB2024050731 SB2024070445 SB2024071844 and 15 more |
||
| #VU89220 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2024-30172 |
CWE-835 | Medium | 11.2.4 FP5, 12.0.4 | 07.05.2024 |
SB2024050731 SB2024061019 SB20240611170 and 62 more |
||
| #VU89219 - Observable discrepancy CVE-2024-30171 |
CWE-203 | Medium | 11.2.4 FP5, 12.0.4 | 07.05.2024 |
SB2024050731 SB2024050734 SB2024061019 and 59 more |
||
| #VU89218 - Resource exhaustion CVE-2024-29857 |
CWE-400 | Medium | 11.2.4 FP5, 12.0.4 | 07.05.2024 |
SB2024050731 SB2024061019 SB20240611170 and 69 more |
||
| #VU88665 - Improper input validation CVE-2024-21085 |
CWE-20 | Low | 11.2.4 FP5, 12.0.4 | 17.04.2024 |
SB2024041764 SB2024041765 SB2024041796 and 125 more |
||
| #VU88666 - Improper input validation CVE-2024-21011 |
CWE-20 | Low | 11.2.4 FP5, 12.0.4 | 17.04.2024 |
SB2024041764 SB2024041765 SB2024041766 and 132 more |
||
| #VU88668 - Improper input validation CVE-2024-21094 |
CWE-20 | Low | 11.2.4 FP5, 12.0.4 | 17.04.2024 |
SB2024041764 SB2024041765 SB2024041766 and 126 more |
||
| #VU85468 - Improper input validation CVE-2024-20918 |
CWE-20 | Medium | 11.2.4 FP4, 12.0.3 | 16.01.2024 |
SB2024011689 SB2024011690 SB2024011691 and 192 more |
||
| #VU85469 - Improper input validation CVE-2024-20952 |
CWE-20 | Medium | 11.2.4 FP4, 12.0.3 | 16.01.2024 |
SB2024011689 SB2024011690 SB2024011691 and 189 more |
Showing elements 1 - 20 out of 53