Known vulnerabilities in IBM Cognos Analytics - page 8
Vendor:
IBM Corporation
Software:
IBM Cognos Analytics
Software CPE:
cpe:2.3:a:ibm_corporation:ibm_cognos_analytics:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
206
Public exploits:
21
Known exploited (KEV):
5
Highest CVSSv4 Score:
9.4
Breakdown by Severity Chart
12.1.3-2606251736
12.1.3-2607110822
11.2.4 FP6
12.0.4 FP1
12.1.0 IF2
12.0.4 IF1
11.2.4 FP5
11.2.4 IF7
12.0.4 IF3
12.1.0
12.1.0 IF1
11.2.4 IF5
12.0.4 IF2
12.0.4
11.2.4 IF2
12.0.3 IF2
12.0.0
11.2.2
11.2.1
11.2.4 FP4
12.0.3 IF1
12.0.3
12.0.2
11.1.7 Fix Pack 8
11.2.4 FP3
12.0.1
11.2.4 Fix Pack 2
11.2.4
11.1.7 Fix Pack 7
11.2.4.1 IF1
11.2.3
11.2.0
11.2.1.3
11.1.7.8
11.0.13.5
11.2.1.2
11.2.1.1
11.2.1.0
11.1.7.7
11.1.7.6
11.1.7.5
11.1.7.4
11.1.7.3
11.1.7.2
11.1.7.1
11.1.7.0
11.0.13.4
11.0.13.3
11.0.13.2
11.0.13.1
11.0.13
11.0.12
11.0.11
11.0.10
11.0.9
11.0.8
11.0.7
11.0.6
11.0.5
11.0.4
11.0.3
11.0.2
11.0.1
11.0.0
Vulnerabilities (206)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU77741 - Server-Side Request Forgery (SSRF) CVE-2022-38708 |
CWE-918 | High | 11.1.7.6, 11.2.4 | 27.06.2023 |
SB2023062723 |
||
| #VU77740 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CVE-2022-43883 |
CWE-74 | Medium | 11.1.7.6, 11.2.4 | 27.06.2023 |
SB2023062723 |
||
| #VU77738 - Information Exposure Through Log Files CVE-2022-43887 |
CWE-532 | Medium | 11.1.7.6, 11.2.4 | 27.06.2023 |
SB2023062723 |
||
| #VU76065 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-39036 |
CWE-79 | Medium | 11.1.7 Fix Pack 7, 11.2.4.1 IF1 | 12.05.2023 |
SB2023051212 |
||
| #VU72247 - Improper input validation CVE-2022-38900 |
CWE-20 | Medium | 11.1.7 Fix Pack 7, 11.2.4.1 IF1 | 15.02.2023 |
SB2023021531 SB2023022714 SB2023032315 and 35 more |
||
| #VU70118 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2022-41881 |
CWE-835 | Medium | 11.1.7 Fix Pack 7, 11.2.4.1 IF1 | 12.12.2022 |
SB2022121215 SB2023011210 SB2023011757 and 74 more |
||
| #VU70097 - Heap-based Buffer Overflow CVE-2015-5237 |
CWE-122 | High | 11.1.7 Fix Pack 7, 11.2.4.1 IF1 | 10.12.2022 |
SB2017092512 SB2023011801 SB2023042744 and 7 more |
||
| #VU69467 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2022-39135 |
CWE-611 | High | 11.1.7 Fix Pack 7, 11.2.4.1 IF1 | 21.11.2022 |
SB2022112141 SB2022112142 SB2023040701 and 4 more |
||
| #VU69392 - Resource exhaustion CVE-2022-45061 |
CWE-400 | Medium | 11.1.7 Fix Pack 7, 11.2.4.1 IF1 | 16.11.2022 |
SB2022111650 SB2022112824 SB2022112856 and 125 more |
||
| #VU69293 - Improper input validation CVE-2022-3171 |
CWE-20 | Medium | 11.1.7 Fix Pack 7, 11.2.4.1 IF1 | 14.11.2022 |
SB2022111433 SB2022111440 SB2022112934 and 105 more |
||
| #VU68832 - Resource exhaustion CVE-2022-42004 |
CWE-400 | Medium | 11.1.7.6, 11.2.4 | 31.10.2022 |
SB2022103116 SB2022103117 SB2022111404 and 122 more |
||
| #VU68635 - Deserialization of Untrusted Data CVE-2022-42003 |
CWE-502 | Medium | 11.1.7.6, 11.2.4 | 25.10.2022 |
SB2022102509 SB2022102510 SB2022103117 and 208 more |
||
| #VU65864 - Improper Control of Generation of Code ('Code Injection') CVE-2022-36364 |
CWE-94 | Medium | 11.1.7.6, 11.2.4 | 28.07.2022 |
SB2022072832 SB2022122706 SB2023062723 and 3 more |
||
| #VU65835 - Incorrect Regular Expression CVE-2022-31129 |
CWE-185 | Medium | 11.1.7 Fix Pack 7, 11.2.4.1 IF1 | 27.07.2022 |
SB2022072729 SB2022072901 SB2022081048 and 102 more |
||
| #VU64152 - Deserialization of Untrusted Data CVE-2022-25647 |
CWE-502 | Medium | 11.1.7.6, 11.2.4 | 10.06.2022 |
SB2021120221 SB2022061003 SB2022061421 and 94 more |
||
| #VU61427 - Incorrect Regular Expression CVE-2022-24729 |
CWE-185 | Low | 11.1.7 Fix Pack 7, 11.2.4.1 IF1 | 17.03.2022 |
SB2022031702 SB2022031703 SB2022031704 and 24 more |
||
| #VU61426 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-24728 |
CWE-79 | Low | 11.1.7 Fix Pack 7, 11.2.4.1 IF1 | 17.03.2022 |
SB2022031702 SB2022031703 SB2022031704 and 12 more |
||
| #VU60181 - Resource Management Errors CVE-2021-22569 |
CWE-399 | Medium | 11.1.7 Fix Pack 7, 11.2.4.1 IF1 | 31.01.2022 |
SB2022013106 SB2022013107 SB2022041933 and 42 more |
||
| #VU54225 - Use After Free CVE-2021-3518 |
CWE-416 | High | 11.1.7 Fix Pack 7, 11.2.4.1 IF1 | 18.06.2021 |
SB2020110609 SB2021061811 SB2021063005 and 40 more |
||
| #VU54222 - Use After Free CVE-2021-3516 |
CWE-416 | High | 11.1.7 Fix Pack 7, 11.2.4.1 IF1 | 18.06.2021 |
SB2020110609 SB2021061811 SB2021063005 and 28 more |
Showing elements 141 - 160 out of 206