Known vulnerabilities in IBM Cognos Analytics - page 5
Vendor:
IBM Corporation
Software:
IBM Cognos Analytics
Software CPE:
cpe:2.3:a:ibm_corporation:ibm_cognos_analytics:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
206
Public exploits:
21
Known exploited (KEV):
5
Highest CVSSv4 Score:
9.4
Breakdown by Severity Chart
12.1.3-2606251736
12.1.3-2607110822
11.2.4 FP6
12.0.4 FP1
12.1.0 IF2
12.0.4 IF1
11.2.4 FP5
11.2.4 IF7
12.0.4 IF3
12.1.0
12.1.0 IF1
11.2.4 IF5
12.0.4 IF2
12.0.4
11.2.4 IF2
12.0.3 IF2
12.0.0
11.2.2
11.2.1
11.2.4 FP4
12.0.3 IF1
12.0.3
12.0.2
11.1.7 Fix Pack 8
11.2.4 FP3
12.0.1
11.2.4 Fix Pack 2
11.2.4
11.1.7 Fix Pack 7
11.2.4.1 IF1
11.2.3
11.2.0
11.2.1.3
11.1.7.8
11.0.13.5
11.2.1.2
11.2.1.1
11.2.1.0
11.1.7.7
11.1.7.6
11.1.7.5
11.1.7.4
11.1.7.3
11.1.7.2
11.1.7.1
11.1.7.0
11.0.13.4
11.0.13.3
11.0.13.2
11.0.13.1
11.0.13
11.0.12
11.0.11
11.0.10
11.0.9
11.0.8
11.0.7
11.0.6
11.0.5
11.0.4
11.0.3
11.0.2
11.0.1
11.0.0
Vulnerabilities (206)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU86787 - Allocation of Resources Without Limits or Throttling CVE-2022-34357 |
CWE-770 | Low | 11.1.7 Fix Pack 8, 11.2.4 FP3, 12.0.2 | 26.02.2024 |
SB2024022640 |
||
| #VU82558 - Cross-Site Request Forgery (CSRF) CVE-2023-45857 |
CWE-352 | Low | 11.1.7 Fix Pack 8, 11.2.4 FP3, 12.0.2 | 30.10.2023 |
SB2023103024 SB2023113014 SB2023121224 and 41 more |
||
| #VU81728 - Resource exhaustion CVE-2023-44487 |
CWE-400 | High | 11.1.7 Fix Pack 8, 11.2.4 FP3, 12.0.2 | 10.10.2023 |
SB2023101023 SB2023101024 SB2023101037 and 648 more |
||
| #VU81726 - Integer overflow CVE-2023-36478 |
CWE-190 | Medium | 11.1.7 Fix Pack 8, 11.2.4 FP3, 12.0.2 | 10.10.2023 |
SB2023101018 SB2023102640 SB2023103106 and 53 more |
||
| #VU79799 - Inefficient Regular Expression Complexity CVE-2023-26115 |
CWE-1333 | Medium | 11.1.7 Fix Pack 8, 11.2.4 FP3, 12.0.2 | 21.08.2023 |
SB2023082199 SB20230821104 SB2023082858 and 21 more |
||
| #VU78414 - Improper input validation CVE-2023-22049 |
CWE-20 | Low | 11.1.7 Fix Pack 8, 11.2.4 FP3, 12.0.2 | 19.07.2023 |
SB2023071985 SB2023071986 SB2023071987 and 164 more |
||
| #VU75264 - Improper input validation CVE-2023-21939 |
CWE-20 | Medium | 11.1.7 Fix Pack 8, 11.2.4 FP3, 12.0.2 | 18.04.2023 |
SB20230418166 SB20230418167 SB2023041942 and 179 more |
||
| #VU75261 - Improper input validation CVE-2023-21967 |
CWE-20 | Medium | 11.1.7 Fix Pack 8, 11.2.4 FP3, 12.0.2 | 18.04.2023 |
SB20230418166 SB20230418167 SB2023041942 and 189 more |
||
| #VU75262 - Improper input validation CVE-2023-21954 |
CWE-20 | Medium | 11.1.7 Fix Pack 8, 11.2.4 FP3, 12.0.2 | 18.04.2023 |
SB20230418166 SB20230418167 SB2023041942 and 166 more |
||
| #VU71995 - Use After Free CVE-2023-0215 |
CWE-416 | Medium | 11.1.7 Fix Pack 8, 11.2.4 FP3, 12.0.2 | 07.02.2023 |
SB2023020742 SB2023020747 SB2023020748 and 209 more |
||
| #VU71379 - Incorrect Regular Expression CVE-2022-40897 |
CWE-185 | Medium | 11.1.7 Fix Pack 8, 11.2.4 FP3, 12.0.2 | 20.01.2023 |
SB2023012008 SB2023012015 SB2023012016 and 99 more |
||
| #VU70524 - Out-of-bounds write CVE-2022-41854 |
CWE-787 | Medium | 11.1.7 Fix Pack 8, 11.2.4 FP3, 12.0.2 | 28.12.2022 |
SB2022122813 SB2022122926 SB2023010417 and 52 more |
||
| #VU70385 - Deserialization of Untrusted Data CVE-2022-1471 |
CWE-502 | High | 11.1.7 Fix Pack 8, 11.2.4 FP3, 12.0.2 | 15.12.2022 |
SB2022121539 SB2022121540 SB2022121928 and 124 more |
||
| #VU65495 - Improper input validation CVE-2022-34169 |
CWE-20 | High | 11.1.7 Fix Pack 8, 11.2.4 FP3, 12.0.2 | 20.07.2022 |
SB2022072046 SB2022072047 SB2022072140 and 137 more |
||
| #VU64922 - Missing Encryption of Sensitive Data CVE-2022-2097 |
CWE-311 | Low | 11.1.7 Fix Pack 8, 11.2.4 FP3, 12.0.2 | 05.07.2022 |
SB2022070509 SB2022070522 SB2022070531 and 112 more |
||
| #VU61391 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2022-0778 |
CWE-835 | Medium | 11.1.7 Fix Pack 8, 11.2.4 FP3, 12.0.2 | 15.03.2022 |
SB2022031520 SB2022031522 SB2022031611 and 238 more |
||
| #VU57492 - Improper input validation CVE-2021-35559 |
CWE-20 | Medium | 11.1.7 Fix Pack 8, 11.2.4 FP3, 12.0.2 | 19.10.2021 |
SB2021101939 SB2021101940 SB2021102101 and 80 more |
||
| #VU57496 - Improper input validation CVE-2021-35603 |
CWE-20 | Low | 11.1.7 Fix Pack 8, 11.2.4 FP3, 12.0.2 | 19.10.2021 |
SB2021101939 SB2021101940 SB2021102101 and 112 more |
||
| #VU51733 - NULL Pointer Dereference CVE-2021-3449 |
CWE-476 | Medium | 11.1.7 Fix Pack 8, 11.2.4 FP3, 12.0.2 | 25.03.2021 |
SB2021032518 SB2021032602 SB2021032617 and 56 more |
||
| #VU50740 - NULL Pointer Dereference CVE-2021-23841 |
CWE-476 | Medium | 11.1.7 Fix Pack 8, 11.2.4 FP3, 12.0.2 | 17.02.2021 |
SB2021021702 SB2021021817 SB2021022420 and 66 more |
Showing elements 81 - 100 out of 206