Known vulnerabilities in IBM Cognos Analytics - page 2

Software CPE: cpe:2.3:a:ibm_corporation:ibm_cognos_analytics:*:*:*:*:*:*:*:*
Total vulnerabilities: 206
Public exploits: 21
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cognos Analytics IBM Cognos Analytics is affected by 206 known vulnerabilities: 4 critical, 31 high, 108 medium, 63 low Critical High Medium Low

Vulnerabilities (206)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU96058 - Exposure of sensitive information to an unauthorized actor
CVE-2023-50314
CWE-200 Low
No
No
11.2.4 IF5, 12.0.4 IF2 15.08.2024 SB2024081566
SB2024091324
SB2024091814
and 44 more
#VU88803 - Server-Side Request Forgery (SSRF)
CVE-2024-22329
CWE-918 Medium
No
No
11.2.4 FP4, 12.0.4 18.04.2024 SB2024041812
SB2024042613
SB2024043016
and 67 more
#VU87831 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-27270
CWE-79 Medium
No
No
11.2.4 FP4, 12.0.4 26.03.2024 SB2024032654
SB2024050220
SB2024050920
and 31 more
#VU86988 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2023-50312
CWE-327 Low
No
No
11.2.4 FP4, 12.0.4 04.03.2024 SB2024030425
SB2024031819
SB2024032049
and 49 more
#VU86733 - Improper input validation
CVE-2024-22025
CWE-20 Medium
No
No
11.2.4 FP4, 12.0.4 22.02.2024 SB2024022225
SB2024022226
SB2024022832
and 34 more
#VU86728 - Inconsistency Between Implementation and Documented Design
CVE-2024-21890
CWE-1068 Low
No
No
11.2.4 FP4, 12.0.4 22.02.2024 SB2024022225
SB2024022226
SB2024022833
and 16 more
#VU86726 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-21891
CWE-22 Medium
No
No
11.2.4 FP4, 12.0.4 22.02.2024 SB2024022225
SB2024022226
SB2024022833
and 16 more
#VU86724 - Covert Timing Channel
CVE-2023-46809
CWE-385 Medium
No
No
11.2.4 FP4, 12.0.4 22.02.2024 SB2024022225
SB2024022226
SB2024022832
and 35 more
#VU86723 - Improper Privilege Management
CVE-2024-22017
CWE-269 Low
No
No
11.2.4 FP4, 12.0.4 22.02.2024 SB2024022225
SB2024022226
SB2024022833
and 16 more
#VU86722 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-21896
CWE-22 Medium
No
No
11.2.4 FP4, 12.0.4 22.02.2024 SB2024022225
SB2024022226
SB2024022833
and 16 more
#VU86721 - Improper input validation
CVE-2024-22019
CWE-20 Medium
No
No
11.2.4 FP4, 12.0.4 22.02.2024 SB2024022225
SB2024022226
SB2024022832
and 48 more
#VU86718 - Improper Handling of Exceptional Conditions
CVE-2024-21892
CWE-755 Low
No
No
11.2.4 FP4, 12.0.4 22.02.2024 SB2024022225
SB2024022226
SB2024022832
and 30 more
#VU83241 - Information Exposure Through Log Files
CVE-2023-44483
CWE-532 Medium
No
No
11.2.4 FP4, 12.0.4 17.11.2023 SB2023111724
SB2023111747
SB2023120143
and 76 more
#VU80793 - Improper Authorization
CVE-2023-41900
CWE-285 Low
No
No
11.2.4 FP4, 12.0.4 14.09.2023 SB2023091440
SB2023092933
SB2023102621
and 29 more
#VU80792 - Improper input validation
CVE-2023-36479
CWE-20 Medium
No
No
11.2.4 FP4, 12.0.4 14.09.2023 SB2023091440
SB2023092933
SB2023102621
and 48 more
#VU80791 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-40167
CWE-444 Medium
No
No
11.2.4 FP4, 12.0.4 14.09.2023 SB2023091440
SB2023092933
SB2023101760
and 68 more
#VU79665 - Improper input validation
CVE-2023-38737
CWE-20 Medium
No
No
11.2.4 FP4, 12.0.4 17.08.2023 SB2023081721
SB2023100203
SB2023100308
and 20 more
#VU75218 - Resource exhaustion
CVE-2023-26048
CWE-400 Medium
No
No
11.2.4 FP4, 12.0.4 18.04.2023 SB2023041842
SB2023051753
SB2023060701
and 55 more
#VU65264 - Unrestricted Upload of File with Dangerous Type
CVE-2022-29622
CWE-434 High
Available
No
11.2.4 FP4, 12.0.4 13.07.2022 SB2022071326
SB2022072212
SB2022120629
and 2 more
#VU48942 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2020-27216
CWE-362 Low
No
No
11.2.4 FP4, 12.0.4 23.10.2020 SB2020121307
SB2020121308
SB2021012011
and 27 more


Showing elements 21 - 40 out of 206