Known vulnerabilities in IBM Cognos Analytics - page 4
Vendor:
IBM Corporation
Software:
IBM Cognos Analytics
Software CPE:
cpe:2.3:a:ibm_corporation:ibm_cognos_analytics:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
206
Public exploits:
21
Known exploited (KEV):
5
Highest CVSSv4 Score:
9.4
Breakdown by Severity Chart
12.1.3-2606251736
12.1.3-2607110822
11.2.4 FP6
12.0.4 FP1
12.1.0 IF2
12.0.4 IF1
11.2.4 FP5
11.2.4 IF7
12.0.4 IF3
12.1.0
12.1.0 IF1
11.2.4 IF5
12.0.4 IF2
12.0.4
11.2.4 IF2
12.0.3 IF2
12.0.0
11.2.2
11.2.1
11.2.4 FP4
12.0.3 IF1
12.0.3
12.0.2
11.1.7 Fix Pack 8
11.2.4 FP3
12.0.1
11.2.4 Fix Pack 2
11.2.4
11.1.7 Fix Pack 7
11.2.4.1 IF1
11.2.3
11.2.0
11.2.1.3
11.1.7.8
11.0.13.5
11.2.1.2
11.2.1.1
11.2.1.0
11.1.7.7
11.1.7.6
11.1.7.5
11.1.7.4
11.1.7.3
11.1.7.2
11.1.7.1
11.1.7.0
11.0.13.4
11.0.13.3
11.0.13.2
11.0.13.1
11.0.13
11.0.12
11.0.11
11.0.10
11.0.9
11.0.8
11.0.7
11.0.6
11.0.5
11.0.4
11.0.3
11.0.2
11.0.1
11.0.0
Vulnerabilities (206)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU77605 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2023-30589 |
CWE-444 | Medium | 11.1.7 Fix Pack 8, 11.2.4 FP3, 12.0.2 | 21.06.2023 |
SB2023062144 SB2023062727 SB2023062743 and 43 more |
||
| #VU77604 - Improper input validation CVE-2023-30588 |
CWE-20 | Medium | 11.1.7 Fix Pack 8, 11.2.4 FP3, 12.0.2 | 21.06.2023 |
SB2023062144 SB2023062727 SB2023062743 and 33 more |
||
| #VU76906 - Out-of-bounds read CVE-2023-2597 |
CWE-125 | High | 11.1.7 Fix Pack 8, 11.2.4 FP3, 12.0.2 | 05.06.2023 |
SB2023060525 SB2023060705 SB2023060930 and 86 more |
||
| #VU75604 - Improper Certificate Validation CVE-2023-31484 |
CWE-295 | Medium | 11.2.4 FP3, 12.0.3 | 01.05.2023 |
SB2023050116 SB2023052927 SB2023060526 and 39 more |
||
| #VU75265 - Improper input validation CVE-2023-21938 |
CWE-20 | Low | 11.1.7 Fix Pack 8, 11.2.4 FP3, 12.0.2 | 18.04.2023 |
SB20230418166 SB20230418167 SB2023041942 and 181 more |
||
| #VU75266 - Improper input validation CVE-2023-21968 |
CWE-20 | Low | 11.1.7 Fix Pack 8, 11.2.4 FP3, 12.0.2 | 18.04.2023 |
SB20230418166 SB20230418167 SB2023041942 and 179 more |
||
| #VU75267 - Improper input validation CVE-2023-21937 |
CWE-20 | Low | 11.1.7 Fix Pack 8, 11.2.4 FP3, 12.0.2 | 18.04.2023 |
SB20230418166 SB20230418167 SB2023041942 and 184 more |
||
| #VU72146 - Improper input validation CVE-2012-5784 |
CWE-20 | Medium | 11.1.7 Fix Pack 8, 11.2.4 FP3, 12.0.2 | 13.02.2023 |
SB2023021403 SB2023061227 SB2024022640 and 3 more |
||
| #VU71182 - Use of a Broken or Risky Cryptographic Algorithm CVE-2022-23540 |
CWE-327 | High | 11.2.4 FP3, 12.0.3 | 16.01.2023 |
SB2023011632 SB2023011633 SB2023020322 and 15 more |
||
| #VU71181 - Use of a Broken or Risky Cryptographic Algorithm CVE-2022-23541 |
CWE-327 | High | 11.2.4 FP3, 12.0.3 | 16.01.2023 |
SB2023011632 SB2023011633 SB2023020322 and 16 more |
||
| #VU71180 - Use of a Broken or Risky Cryptographic Algorithm CVE-2022-23539 |
CWE-327 | Medium | 11.2.4 FP3, 12.0.3 | 16.01.2023 |
SB2023011632 SB2023011633 SB2023020322 and 16 more |
||
| #VU55498 - Improper Control of Generation of Code ('Code Injection') CVE-2020-15366 |
CWE-94 | Medium | 11.2.4 FP3, 12.0.3 | 02.08.2021 |
SB2020071552 SB2021080213 SB2020120120 and 14 more |
||
| #VU51604 - Improper Validation of Certificate with Host Mismatch CVE-2021-28363 |
CWE-297 | Medium | 11.2.4 FP3, 12.0.3 | 22.03.2021 |
SB2021032215 SB2021052523 SB2021071501 and 9 more |
||
| #VU50745 - Improper input validation CVE-2021-23840 |
CWE-20 | Medium | 11.1.7 Fix Pack 8, 11.2.4 FP3, 12.0.2 | 17.02.2021 |
SB2021021702 SB2021021817 SB2021022420 and 83 more |
||
| #VU50744 - Cryptographic Issues CVE-2021-23839 |
CWE-310 | Low | 11.1.7 Fix Pack 8, 11.2.4 FP3, 12.0.2 | 17.02.2021 |
SB2021021702 SB2021041501 SB2021041502 and 15 more |
||
| #VU48896 - NULL Pointer Dereference CVE-2020-1971 |
CWE-476 | Medium | 11.1.7 Fix Pack 8, 11.2.4 FP3, 12.0.2 | 08.12.2020 |
SB2020120852 SB2020120903 SB2020120905 and 91 more |
||
| #VU24468 - Improper input validation CVE-2019-0227 |
CWE-20 | Medium | 11.1.7 Fix Pack 8, 11.2.4 FP3, 12.0.2 | 21.01.2020 |
SB2020012205 SB2020012308 SB2020012309 and 40 more |
||
| #VU21043 - Cryptographic Issues CVE-2019-1547 |
CWE-310 | Low | 11.1.7 Fix Pack 8, 11.2.4 FP3, 12.0.2 | 11.09.2019 |
SB2019091112 SB2019091202 SB2019092407 and 39 more |
||
| #VU14296 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2018-8032 |
CWE-79 | Low | 11.1.7 Fix Pack 8, 11.2.4 FP3, 12.0.2 | 08.08.2018 |
SB2018080909 SB2018101810 SB2023021403 and 5 more |
||
| #VU41375 - Improper input validation CVE-2014-3596 |
CWE-20 | Medium | 11.1.7 Fix Pack 8, 11.2.4 FP3, 12.0.2 | 27.08.2014 |
SB2014082703 SB2014091802 SB2023021403 and 5 more |
Showing elements 61 - 80 out of 206