Known vulnerabilities in IBM Cognos Business Intelligence Server

Vendor: IBM Corporation
Software: IBM Cognos Business Intelligence Server
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cognos_business_intelligence_server:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 40
Public exploits: 1
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cognos Business Intelligence Server IBM Cognos Business Intelligence Server is affected by 40 known vulnerabilities: 5 high, 9 medium, 26 low Critical High Medium Low

Vulnerabilities (40)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU77680 - Resource exhaustion
CVE-2012-5081		 CWE-400 Medium
No
No
 8.4.1.1, 10.1.1.2, 10.1.2, 10.2.1 23.06.2023 SB2022110602
#VU77678 - Exposure of sensitive information to an unauthorized actor
CVE-2012-4837		 CWE-200 Low
No
No
 8.4.1.1, 10.1.1.2, 10.1.2, 10.2.1 23.06.2023 SB2022110602
#VU77677 - Improper Control of Generation of Code ('Code Injection')
CVE-2012-4840		 CWE-94 Medium
No
No
 8.4.1.1, 10.1.1.2, 10.1.2, 10.2.1 23.06.2023 SB2022110602
#VU77676 - Improper input validation
CVE-2012-4858		 CWE-20 High
No
No
 8.4.1.1, 10.1.1.2, 10.1.2, 10.2.1 23.06.2023 SB2022110602
#VU77675 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-2193		 CWE-79 Medium
No
No
 8.4.1.1, 10.1.1.2, 10.1.2, 10.2.1 23.06.2023 SB2022110602
#VU77674 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-4835		 CWE-79 Medium
No
No
 8.4.1.1, 10.1.1.2, 10.1.2, 10.2.1 23.06.2023 SB2022110602
#VU77673 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-4836		 CWE-79 Low
No
No
 8.4.1.1, 10.1.1.2, 10.1.2, 10.2.1 23.06.2023 SB2022110602
#VU77672 - Resource Management Errors
CVE-2011-4858		 CWE-399 Medium
No
No
 8.4.1.1, 10.1.1.2, 10.1.2, 10.2.1 23.06.2023 SB2022110602
#VU77668 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-2177		 CWE-79 Medium
No
No
 8.4.1.1, 10.1.1.2, 10.1.2, 10.2.1 23.06.2023 SB2022110602
#VU77667 - Improper Control of Generation of Code ('Code Injection')
CVE-2012-0498		 CWE-94 High
No
No
 8.4.1.1, 10.1.1.2, 10.1.2, 10.2.1 23.06.2023 SB2022110602
#VU12583 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-1413		 CWE-79 Low
No
No
 - 10.05.2018 SB2018051118
SB2018072004
#VU11294 - Resource exhaustion
CVE-2018-0739		 CWE-400 Low
No
No
 - 28.03.2018 SB2018032804
SB2018032903
SB2018033002
and 36 more
#VU11285 - Data Handling
CVE-2017-12624		 CWE-19 Low
No
No
 - 27.03.2018 SB2017111431
SB2018072004
SB2018110715
and 5 more
#VU9607 - Improper input validation
CVE-2017-15095		 CWE-20 High
No
No
 - 08.12.2017 SB2017121101
SB2017111609
SB2018051424
and 29 more
#VU9594 - Improper input validation
CVE-2017-3737		 CWE-20 Medium
No
No
 - 08.12.2017 SB2017120804
SB2017120902
SB2017121001
and 21 more
#VU9128 - Deserialization of Untrusted Data
CVE-2017-7525		 CWE-502 High
Available
No
 - 08.11.2017 SB2017110807
SB2017102005
SB2017120205
and 41 more
#VU9109 - Cryptographic Issues
CVE-2017-3736		 CWE-310 Low
No
No
 - 02.11.2017 SB2017110221
SB2017110302
SB2017110401
and 34 more
#VU8487 - Out-of-bounds read
CVE-2017-3735		 CWE-125 Low
No
No
 - 28.08.2017 SB2017082906
SB2017110401
SB2017110402
and 30 more
#VU85 - Cross-Site Request Forgery (CSRF)
CVE-2016-0221		 CWE-352 Medium
No
No
 - 04.07.2016 SB2016070406
#VU44269 - Integer overflow
CVE-2011-3026		 CWE-190 Medium
No
No
 8.4.1.1, 10.1.1.2, 10.1.2, 10.2.1 16.02.2012 SB2012021601
SB2012022809
SB2012022701
and 8 more


Showing elements 1 - 20 out of 40