IBM Cognos Analytics 11.1.7 Fix Pack 7

CPE Details

IBM Cognos Analytics 11.1.7 Fix Pack 7
ibm
cognos_analytics
11.1.7
2023-09-28
12h20 +00:00
2023-09-28
12h20 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:ibm:cognos_analytics:11.1.7:fixpack7:*:*:*:*:*:*

Informations

Vendor

ibm

Product

cognos_analytics

Version

11.1.7

Update

fixpack7

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2023-43051 2024-02-24 15h40 +00:00 IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 267451.
5.4
Moyen
CVE-2022-34357 2024-02-24 15h38 +00:00 IBM Cognos Analytics Mobile Server 11.1.7, 11.2.4, and 12.0.0 is vulnerable to Denial of Service due to due to weak or absence of rate limiting. By making unlimited http requests, it is possible for a single user to exhaust server resources over a period of time making service unavailable for other legitimate users. IBM X-Force ID: 230510.
6.5
Moyen
CVE-2023-30996 2024-02-24 15h35 +00:00 IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 could be vulnerable to information leakage due to unverified sources in messages sent between Windows objects of different origins. IBM X-Force ID: 254290.
5.3
Moyen
CVE-2023-32344 2024-02-24 15h29 +00:00 IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 is vulnerable to form action hijacking where it is possible to modify the form action to reference an arbitrary path. IBM X-Force ID: 255898.
4.3
Moyen
CVE-2023-38359 2024-02-24 15h27 +00:00 IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 260744.
6.1
Moyen
CVE-2022-43883 2022-12-19 20h47 +00:00 IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could be vulnerable to a Log Injection attack by constructing URLs from user-controlled data. This could enable attackers to make arbitrary requests to the internal network or to the local file system. IBM X-Force ID: 240266.
7.5
Haute
CVE-2022-38708 2022-12-19 20h12 +00:00 IBM Cognos Analytics 11.1.7 11.2.0, and 11.2.1 could be vulnerable to a Server-Side Request Forgery Attack (SSRF) attack by constructing URLs from user-controlled data. This could enable attackers to make arbitrary requests to the internal network or to the local file system. IBM X-Force ID: 234180.
9.1
Critique
CVE-2021-29745 2021-10-15 15h55 +00:00 IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to priviledge escalation where a lower evel user could have access to the 'New Job' page to which they should not have access to. IBM X-Force ID: 201695.
8.8
Haute
CVE-2021-29679 2021-10-15 15h55 +00:00 IBM Cognos Analytics 11.1.7 and 11.2.0 could allow an authenticated user to execute code remotely due to incorrectly neutralizaing user-contrlled input that could be interpreted a a server-side include (SSI) directive. IBM X-Force ID: 199915.
8.8
Haute
CVE-2020-4951 2021-10-15 15h55 +00:00 IBM Cognos Analytics 11.1.7 and 11.2.0 contains locally cached browser data, that could allow a local attacker to obtain sensitive information.
3.3
Bas
CVE-2020-4388 2020-10-12 13h20 +00:00 IBM Cognos Analytics 11.0 and 11.1 could be vulnerable to a denial of service attack by failing to catch exceptions in a servlet also exposing debug information could also be used in future attacks. IBM X-Force ID: 179270.
8.2
Haute
CVE-2020-4302 2020-10-12 13h20 +00:00 IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to execute arbitrary code on the system, caused by a CSV injection. By persuading a victim to open a specially-crafted excel file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 176610.
7.8
Haute