IBM Cognos Analytics 11.1.7

CPE Details

IBM Cognos Analytics 11.1.7
ibm
cognos_analytics
11.1.7
2020-11-16
14h46 +00:00
2021-07-02
11h19 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:ibm:cognos_analytics:11.1.7:*:*:*:*:*:*:*

Informations

Vendor

ibm

Product

cognos_analytics

Version

11.1.7

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2022-43883 2022-12-19 20h47 +00:00 IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could be vulnerable to a Log Injection attack by constructing URLs from user-controlled data. This could enable attackers to make arbitrary requests to the internal network or to the local file system. IBM X-Force ID: 240266.
7.5
High
CVE-2022-38708 2022-12-19 20h12 +00:00 IBM Cognos Analytics 11.1.7 11.2.0, and 11.2.1 could be vulnerable to a Server-Side Request Forgery Attack (SSRF) attack by constructing URLs from user-controlled data. This could enable attackers to make arbitrary requests to the internal network or to the local file system. IBM X-Force ID: 234180.
9.1
Critical
CVE-2021-29745 2021-10-15 15h55 +00:00 IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to priviledge escalation where a lower evel user could have access to the 'New Job' page to which they should not have access to. IBM X-Force ID: 201695.
8.8
High
CVE-2021-29679 2021-10-15 15h55 +00:00 IBM Cognos Analytics 11.1.7 and 11.2.0 could allow an authenticated user to execute code remotely due to incorrectly neutralizaing user-contrlled input that could be interpreted a a server-side include (SSI) directive. IBM X-Force ID: 199915.
8.8
High
CVE-2020-4951 2021-10-15 15h55 +00:00 IBM Cognos Analytics 11.1.7 and 11.2.0 contains locally cached browser data, that could allow a local attacker to obtain sensitive information.
3.3
Low
CVE-2020-4388 2020-10-12 13h20 +00:00 IBM Cognos Analytics 11.0 and 11.1 could be vulnerable to a denial of service attack by failing to catch exceptions in a servlet also exposing debug information could also be used in future attacks. IBM X-Force ID: 179270.
8.2
High
CVE-2020-4302 2020-10-12 13h20 +00:00 IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to execute arbitrary code on the system, caused by a CSV injection. By persuading a victim to open a specially-crafted excel file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 176610.
7.8
High