Known vulnerabilities in IBM Cognos Analytics

Software CPE: cpe:2.3:a:ibm_corporation:ibm_cognos_analytics:*:*:*:*:*:*:*:*
Total vulnerabilities: 206
Public exploits: 21
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cognos Analytics IBM Cognos Analytics is affected by 206 known vulnerabilities: 4 critical, 31 high, 108 medium, 63 low Critical High Medium Low

Vulnerabilities (206)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU138312 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-15995
CWE-362 Medium
No
No
12.1.3-2607110822 17.07.2026 SB2026071761
#VU112162 - Inclusion of Functionality from Untrusted Control Sphere
CVE-2025-27607
CWE-829 High
No
No
11.2.4 FP6, 12.0.4 FP1, 12.1.0 IF2 03.07.2025 SB2025070364
SB2025070404
SB2025072816
and 1 more
#VU111098 - Allocation of Resources Without Limits or Throttling
CVE-2025-25032
CWE-770 Medium
No
No
11.2.4 FP5, 12.0.4 IF1 12.06.2025 SB2025061216
#VU111097 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-0917
CWE-79 Low
No
No
11.2.4 FP5, 12.0.4 IF1 12.06.2025 SB2025061216
#VU111096 - Inclusion of Sensitive Information in Source Code
CVE-2025-0923
CWE-540 Medium
No
No
11.2.4 FP5, 12.0.4 IF1 12.06.2025 SB2025061216
#VU108096 - Unrestricted Upload of File with Dangerous Type
CVE-2024-40695
CWE-434 High
No
No
11.2.4 FP5, 12.0.4 IF1 01.05.2025 SB2025050106
#VU108095 - Improper Neutralization of Special Elements used in an Expression Language Statement
CVE-2024-51466
CWE-917 Critical
No
No
11.2.4 FP5, 12.0.4 IF1 01.05.2025 SB2025050106
#VU105715 - Out-of-bounds write
CVE-2025-27363
CWE-787 Critical
Available
Exploited
11.2.4 IF7, 12.0.4 IF3, 12.1.0 IF1 14.03.2025 SB2025031402
SB2025031502
SB2025031750
and 97 more
#VU103635 - Incorrect Regular Expression
CVE-2017-15010
CWE-185 High
No
No
11.2.4 IF5, 12.0.4 IF2 05.02.2025 SB2025020521
SB2025020522
SB2017101824
and 2 more
#VU103634 - Improper Privilege Management
CVE-2024-41942
CWE-269 High
No
No
11.2.4 IF5, 12.0.4 IF2 05.02.2025 SB2025020520
SB2025020522
#VU103631 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-49352
CWE-611 Medium
No
No
11.2.4 IF5, 12.0.4 IF2 05.02.2025 SB2025020522
#VU89624 - Resource Management Errors
CVE-2024-4603
CWE-399 Low
No
No
11.2.4 FP5, 12.0.4 IF1 17.05.2024 SB2024051715
SB2024052732
SB2024060735
and 65 more
#VU88977 - Resource exhaustion
CVE-2024-25026
CWE-400 Medium
No
No
11.2.4 IF5, 12.0.4 IF2 24.04.2024 SB2024042458
SB2024042525
SB2024042626
and 68 more
#VU88828 - Resource exhaustion
CVE-2024-3651
CWE-400 Medium
No
No
11.2.4 FP5, 12.0.4 IF1 19.04.2024 SB2024041905
SB2024041906
SB2024041907
and 112 more
#VU88802 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-22354
CWE-611 High
No
No
11.2.4 IF5, 12.0.4 IF2 18.04.2024 SB2024041812
SB2024042628
SB2024050920
and 66 more
#VU88136 - Resource exhaustion
CVE-2024-27268
CWE-400 Medium
No
No
11.2.4 IF5, 12.0.4 IF2 04.04.2024 SB2024040437
SB2024050803
SB2024052003
and 40 more
#VU88123 - Resource exhaustion
CVE-2024-22353
CWE-400 Medium
No
No
11.2.4 IF5, 12.0.4 IF2 04.04.2024 SB2024040423
SB2024050220
SB2024050801
and 31 more
#VU86052 - Use After Free
CVE-2024-25062
CWE-416 High
No
No
11.2.4 FP5, 12.0.4 IF1 05.02.2024 SB2024020507
SB2024020508
SB2024020742
and 115 more
#VU79296 - Insufficient Verification of Data Authenticity
CVE-2023-37920
CWE-345 Medium
No
No
11.2.4 IF5, 12.0.4 IF2 09.08.2023 SB2023080939
SB20230821166
SB2023090820
and 89 more
#VU71398 - Insufficient Verification of Data Authenticity
CVE-2022-23491
CWE-345 High
No
No
11.2.4 IF5, 12.0.4 IF2 20.01.2023 SB2023012034
SB2023012035
SB2023012036
and 51 more


Showing elements 1 - 20 out of 206