Known vulnerabilities in IBM Cognos Analytics - page 6
Vendor:
IBM Corporation
Software:
IBM Cognos Analytics
Software CPE:
cpe:2.3:a:ibm_corporation:ibm_cognos_analytics:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
206
Public exploits:
21
Known exploited (KEV):
5
Highest CVSSv4 Score:
9.4
Breakdown by Severity Chart
12.1.3-2606251736
12.1.3-2607110822
11.2.4 FP6
12.0.4 FP1
12.1.0 IF2
12.0.4 IF1
11.2.4 FP5
11.2.4 IF7
12.0.4 IF3
12.1.0
12.1.0 IF1
11.2.4 IF5
12.0.4 IF2
12.0.4
11.2.4 IF2
12.0.3 IF2
12.0.0
11.2.2
11.2.1
11.2.4 FP4
12.0.3 IF1
12.0.3
12.0.2
11.1.7 Fix Pack 8
11.2.4 FP3
12.0.1
11.2.4 Fix Pack 2
11.2.4
11.1.7 Fix Pack 7
11.2.4.1 IF1
11.2.3
11.2.0
11.2.1.3
11.1.7.8
11.0.13.5
11.2.1.2
11.2.1.1
11.2.1.0
11.1.7.7
11.1.7.6
11.1.7.5
11.1.7.4
11.1.7.3
11.1.7.2
11.1.7.1
11.1.7.0
11.0.13.4
11.0.13.3
11.0.13.2
11.0.13.1
11.0.13
11.0.12
11.0.11
11.0.10
11.0.9
11.0.8
11.0.7
11.0.6
11.0.5
11.0.4
11.0.3
11.0.2
11.0.1
11.0.0
Vulnerabilities (206)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU86799 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-43051 |
CWE-79 | Low | 11.1.7 Fix Pack 8, 11.2.4 FP3, 12.0.2 | 26.02.2024 |
SB2024022640 |
||
| #VU86798 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-38359 |
CWE-79 | Medium | 11.1.7 Fix Pack 8, 11.2.4 FP3, 12.0.2 | 26.02.2024 |
SB2024022640 |
||
| #VU86793 - Cross-Site Request Forgery (CSRF) CVE-2023-32344 |
CWE-352 | Low | 11.1.7 Fix Pack 8, 11.2.4 FP3, 12.0.2 | 26.02.2024 |
SB2024022640 |
||
| #VU86792 - Exposure of sensitive information to an unauthorized actor CVE-2023-30996 |
CWE-200 | Medium | 11.1.7 Fix Pack 8, 11.2.4 FP3, 12.0.2 | 26.02.2024 |
SB2024022640 |
||
| #VU75260 - Improper input validation CVE-2023-21930 |
CWE-20 | Medium | 11.1.7 Fix Pack 8, 11.2.4 FP3, 12.0.2 | 18.04.2023 |
SB20230418166 SB20230418167 SB2023041942 and 191 more |
||
| #VU73960 - Resource exhaustion CVE-2023-0464 |
CWE-400 | Medium | 11.1.7 Fix Pack 8, 11.2.4 FP3, 12.0.2 | 22.03.2023 |
SB2023032241 SB2023033057 SB2023033058 and 100 more |
||
| #VU65499 - Improper input validation CVE-2021-31684 |
CWE-20 | Medium | 11.1.7 Fix Pack 8, 11.2.4 FP3, 12.0.2 | 20.07.2022 |
SB2022072048 SB2022072056 SB2022112850 and 20 more |
||
| #VU62400 - Improper input validation CVE-2022-21496 |
CWE-20 | Medium | 11.1.7 Fix Pack 8, 11.2.4 FP3, 12.0.2 | 19.04.2022 |
SB2022041944 SB2022041945 SB2022042102 and 118 more |
||
| #VU62401 - Improper input validation CVE-2022-21434 |
CWE-20 | Medium | 11.1.7 Fix Pack 8, 11.2.4 FP3, 12.0.2 | 19.04.2022 |
SB2022041944 SB2022041945 SB2022042102 and 111 more |
||
| #VU60084 - Missing initialization of resource CVE-2021-28167 |
CWE-909 | Medium | 11.1.7 Fix Pack 8, 11.2.4 FP3, 12.0.2 | 27.01.2022 |
SB2021042158 SB2022102806 SB2022112426 and 15 more |
||
| #VU60083 - Improper Access Control CVE-2021-41035 |
CWE-284 | High | 11.1.7 Fix Pack 8, 11.2.4 FP3, 12.0.2 | 27.01.2022 |
SB2022012712 SB2022020177 SB2022021424 and 28 more |
||
| #VU59727 - Improper input validation CVE-2022-21299 |
CWE-20 | Medium | 11.1.7 Fix Pack 8, 11.2.4 FP3, 12.0.2 | 18.01.2022 |
SB2022011840 SB2022011841 SB2022011931 and 105 more |
||
| #VU57485 - Improper input validation CVE-2021-35560 |
CWE-20 | Medium | 11.1.7 Fix Pack 8, 11.2.4 FP3, 12.0.2 | 19.10.2021 |
SB2021101940 SB2022020177 SB2022021424 and 28 more |
||
| #VU57487 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle') CVE-2021-35550 |
CWE-300 | Medium | 11.1.7 Fix Pack 8, 11.2.4 FP3, 12.0.2 | 19.10.2021 |
SB2021101939 SB2021101940 SB2021102101 and 102 more |
||
| #VU57489 - Improper input validation CVE-2021-35586 |
CWE-20 | Medium | 11.1.7 Fix Pack 8, 11.2.4 FP3, 12.0.2 | 19.10.2021 |
SB2021101939 SB2021101940 SB2021102101 and 82 more |
||
| #VU57490 - Improper input validation CVE-2021-35564 |
CWE-20 | Medium | 11.1.7 Fix Pack 8, 11.2.4 FP3, 12.0.2 | 19.10.2021 |
SB2021101939 SB2021101940 SB2021102101 and 86 more |
||
| #VU57491 - Improper input validation CVE-2021-35556 |
CWE-20 | Medium | 11.1.7 Fix Pack 8, 11.2.4 FP3, 12.0.2 | 19.10.2021 |
SB2021101939 SB2021101940 SB2021102101 and 76 more |
||
| #VU57494 - Improper input validation CVE-2021-35565 |
CWE-20 | Medium | 11.1.7 Fix Pack 8, 11.2.4 FP3, 12.0.2 | 19.10.2021 |
SB2021101939 SB2021101940 SB2021102101 and 78 more |
||
| #VU57495 - Improper input validation CVE-2021-35578 |
CWE-20 | Medium | 11.1.7 Fix Pack 8, 11.2.4 FP3, 12.0.2 | 19.10.2021 |
SB2021101939 SB2021101940 SB2021102101 and 95 more |
||
| #VU57497 - Improper input validation CVE-2021-35588 |
CWE-20 | Low | 11.1.7 Fix Pack 8, 11.2.4 FP3, 12.0.2 | 19.10.2021 |
SB2021101939 SB2021101940 SB2021102101 and 52 more |
Showing elements 101 - 120 out of 206