# IBM Cognos Analytics.

Every CVE that names IBM Cognos Analytics among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [IBM Cognos Analytics versions 12.0.4 and 12.1.3 is affected by security vulnerabilities](https://agentprime.io/advisories/CVE-2025-36076.md)
  `CVE-2025-36076` · CVE record: IBM Cognos Analytics · CVSS 4.3 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: CWE-540
- [IBM Cognos Analytics versions 12.0.4 and 12.1.3 is affected by security vulnerabilities](https://agentprime.io/advisories/CVE-2025-33147.md)
  `CVE-2025-33147` · CVE record: IBM Cognos Analytics · CVSS 5.9 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: Weak cryptography or TLS
- [IBM Cognos Analytics 12.0.4 and 12.1.3 versions are affected by security vulnerabilities](https://agentprime.io/advisories/CVE-2024-56344.md)
  `CVE-2024-56344` · CVE record: IBM Cognos Analytics · CVSS 5.9 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: Weak cryptography or TLS
- [IBM Cognos Analytics versions 12.0.4 and 12.1.3 is affected by security vulnerabilities](https://agentprime.io/advisories/CVE-2026-7884.md)
  `CVE-2026-7884` · CVE record: IBM Cognos Analytics · CVSS 5.4 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Cross-site scripting (XSS)
- [IBM Cognos Analytics 12.1.3 general availability package contains a data integrity issue in the Agentic AI assistant that may cause incorrect report summaries or report-processing errors under concur…](https://agentprime.io/advisories/CVE-2026-15995.md)
  `CVE-2026-15995` · CVE record: IBM Cognos Analytics · CVSS 5.4 Medium · Not analysed yet · Published 17 Jul 2026 · Tags: Race condition
- [IBM Cognos Analytics is affected by multiple security vulnerabilities](https://agentprime.io/advisories/CVE-2025-3633.md)
  `CVE-2025-3633` · CVE record: IBM Cognos Analytics and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 27 May 2026 · Tags: Cross-site scripting (XSS)
- [IBM Cognos Analytics is affected by Cross-site scripting.](https://agentprime.io/advisories/CVE-2025-36126.md)
  `CVE-2025-36126` · CVE record: IBM Cognos Analytics and 1 more · CVSS 6.4 Medium · Not analysed yet · Published 26 May 2026 · Tags: Cross-site scripting (XSS)
- [IBM Cognos Analytics cross-site scripting](https://agentprime.io/advisories/CVE-2024-52900.md)
  `CVE-2024-52900` · CVE record: IBM Cognos Analytics · CVSS 6.4 Medium · Not analysed yet · Published 28 Jun 2025 · Tags: Cross-site scripting (XSS)
- [IBM Cognos Analytics information disclosure](https://agentprime.io/advisories/CVE-2025-0923.md)
  `CVE-2025-0923` · CVE record: IBM Cognos Analytics · CVSS 5.3 Medium · Not analysed yet · Published 11 Jun 2025 · Tags: CWE-540
- [IBM Cognos Analytics cross-site scripting](https://agentprime.io/advisories/CVE-2025-0917.md)
  `CVE-2025-0917` · CVE record: IBM Cognos Analytics · CVSS 5.5 Medium · Not analysed yet · Published 11 Jun 2025 · Tags: Cross-site scripting (XSS)
- [IBM Cognos Analytics denial of service](https://agentprime.io/advisories/CVE-2025-25032.md)
  `CVE-2025-25032` · CVE record: IBM Cognos Analytics · CVSS 7.5 High · Not analysed yet · Published 11 Jun 2025 · Tags: Denial of service
- [IBM Cognos Analytics path traversal](https://agentprime.io/advisories/CVE-2024-56340.md)
  `CVE-2024-56340` · CVE record: IBM Cognos Analytics · CVSS 6.5 Medium · Not analysed yet · Published 28 Feb 2025 · Tags: Path traversal
- [IBM MQ path traversal](https://agentprime.io/advisories/CVE-2025-0823.md)
  `CVE-2025-0823` · CVE record: IBM Cognos Analytics · CVSS 6.5 Medium · Not analysed yet · Published 28 Feb 2025 · Tags: Path traversal
- [IBM Cognos Anaytics XML external entity injection](https://agentprime.io/advisories/CVE-2024-49352.md)
  `CVE-2024-49352` · CVE record: IBM Cognos Analytics · CVSS 7.1 High · Not analysed yet · Published 5 Feb 2025 · Tags: XML external entities (XXE)
- [IBM Cognos Analytics file upload](https://agentprime.io/advisories/CVE-2024-40695.md)
  `CVE-2024-40695` · CVE record: IBM Cognos Analytics · CVSS 8.0 High · Not analysed yet · Published 20 Dec 2024 · Tags: Unrestricted file upload
- [IBM Cognos Analytics expression language injection](https://agentprime.io/advisories/CVE-2024-51466.md)
  `CVE-2024-51466` · CVE record: IBM Cognos Analytics · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Dec 2024 · Tags: Code injection
- [IBM Cognos Analytics cross-site scripting](https://agentprime.io/advisories/CVE-2024-25042.md)
  `CVE-2024-25042` · CVE record: IBM Cognos Analytics · CVSS 5.4 Medium · Not analysed yet · Published 18 Dec 2024 · Tags: Cross-site scripting (XSS)
- [IBM Cognos Analytics HTTP open redirection](https://agentprime.io/advisories/CVE-2024-45082.md)
  `CVE-2024-45082` · CVE record: IBM Cognos Analytics · CVSS 6.8 Medium · Not analysed yet · Published 18 Dec 2024 · Tags: Open redirect
- [IBM Cognos Analytics HTML injection](https://agentprime.io/advisories/CVE-2024-41752.md)
  `CVE-2024-41752` · CVE record: IBM Cognos Analytics · CVSS 5.4 Medium · Not analysed yet · Published 18 Dec 2024 · Tags: Cross-site scripting (XSS)
- [IBM Cognos Analytics information disclosure](https://agentprime.io/advisories/CVE-2024-40703.md)
  `CVE-2024-40703` · CVE record: IBM Cognos Analytics and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 22 Sept 2024 · Tags: Hard-coded credentials
- [IBM Cognos Analytics cross-site scripting](https://agentprime.io/advisories/CVE-2024-25041.md)
  `CVE-2024-25041` · CVE record: IBM Cognos Analytics · CVSS 5.4 Medium · Not analysed yet · Published 28 Jun 2024 · Tags: Cross-site scripting (XSS)
- [IBM Cognos Analytics improper certificate validation](https://agentprime.io/advisories/CVE-2024-25053.md)
  `CVE-2024-25053` · CVE record: IBM Cognos Analytics · CVSS 5.9 Medium · Not analysed yet · Published 28 Jun 2024 · Tags: Weak cryptography or TLS
- [IBM Cognos Analytics log injection](https://agentprime.io/advisories/CVE-2024-25047.md)
  `CVE-2024-25047` · CVE record: IBM Cognos Analytics · CVSS 8.6 High · Not analysed yet · Published 2 May 2024 · Tags: Other injection
- [IBM Cognos Analytics cross-site scripting](https://agentprime.io/advisories/CVE-2023-43051.md)
  `CVE-2023-43051` · CVE record: IBM Cognos Analytics · CVSS 5.4 Medium · Not analysed yet · Published 24 Feb 2024 · Tags: Cross-site scripting (XSS)
- [IBM Cognos Analytics Mobile Server denial of service](https://agentprime.io/advisories/CVE-2022-34357.md)
  `CVE-2022-34357` · CVE record: IBM Cognos Analytics · CVSS 6.5 Medium · Not analysed yet · Published 24 Feb 2024 · Tags: Denial of service
- [IBM Cognos Analytics cross-origin resource sharing](https://agentprime.io/advisories/CVE-2023-30996.md)
  `CVE-2023-30996` · CVE record: IBM Cognos Analytics · CVSS 5.3 Medium · Not analysed yet · Published 24 Feb 2024 · Tags: CWE-346
- [IBM Cognos Analytics cross-site request forgery](https://agentprime.io/advisories/CVE-2023-32344.md)
  `CVE-2023-32344` · CVE record: IBM Cognos Analytics · CVSS 4.3 Medium · Not analysed yet · Published 24 Feb 2024 · Tags: Cross-site request forgery (CSRF)
- [IBM Cognos Analytics cross-site scripting](https://agentprime.io/advisories/CVE-2023-38359.md)
  `CVE-2023-38359` · CVE record: IBM Cognos Analytics · CVSS 6.1 Medium · Not analysed yet · Published 24 Feb 2024 · Tags: Cross-site scripting (XSS)
- [IBM Cognos Analytics server-side request forgey](https://agentprime.io/advisories/CVE-2023-35011.md)
  `CVE-2023-35011` · CVE record: IBM Cognos Analytics · CVSS 5.4 Medium · Not analysed yet · Published 16 Aug 2023 · Tags: Server-side request forgery (SSRF)
- [IBM Cognos Analytics information disclosure](https://agentprime.io/advisories/CVE-2023-35009.md)
  `CVE-2023-35009` · CVE record: IBM Cognos Analytics · CVSS 5.3 Medium · Not analysed yet · Published 16 Aug 2023 · Tags: Information disclosure
- [IBM Cognos Analytics cross-site scripting](https://agentprime.io/advisories/CVE-2023-28530.md)
  `CVE-2023-28530` · CVE record: IBM Cognos Analytics · CVSS 5.4 Medium · Not analysed yet · Published 22 Jul 2023 · Tags: Cross-site scripting (XSS)
- [IBM Cognos Analytics cross-site scripting](https://agentprime.io/advisories/CVE-2023-25929.md)
  `CVE-2023-25929` · CVE record: IBM Cognos Analytics · CVSS 4.6 Medium · Not analysed yet · Published 22 Jul 2023 · Tags: Cross-site scripting (XSS)
- [IBM Cognos Analytics cross-site scripting](https://agentprime.io/advisories/CVE-2021-39036.md)
  `CVE-2021-39036` · CVE record: IBM Cognos Analytics · CVSS 6.1 Medium · Not analysed yet · Published 12 May 2023 · Tags: Cross-site scripting (XSS)
- [IBM Cognos Analytics cross-site scripting](https://agentprime.io/advisories/CVE-2022-39160.md)
  `CVE-2022-39160` · CVE record: IBM Cognos Analytics · CVSS 6.1 Medium · Not analysed yet · Published 19 Dec 2022 · Tags: Cross-site scripting (XSS)
- [IBM Cognos Analytics data manipulation](https://agentprime.io/advisories/CVE-2022-43883.md)
  `CVE-2022-43883` · CVE record: IBM Cognos Analytics · CVSS 6.5 Medium · Not analysed yet · Published 19 Dec 2022
- [IBM Cognos Analytics information disclosure](https://agentprime.io/advisories/CVE-2022-43887.md)
  `CVE-2022-43887` · CVE record: IBM Cognos Analytics · CVSS 5.3 Medium · Not analysed yet · Published 19 Dec 2022 · Tags: Information disclosure
- [IBM Cognos Analytics server-side request forgery](https://agentprime.io/advisories/CVE-2022-38708.md)
  `CVE-2022-38708` · CVE record: IBM Cognos Analytics · CVSS 6.5 Medium · Not analysed yet · Published 19 Dec 2022 · Tags: Server-side request forgery (SSRF)
- [Cleartext storage of sensitive information in IBM Cognos Analytics](https://agentprime.io/advisories/CVE-2022-34339.md)
  `CVE-2022-34339` · CVE record: IBM Cognos Analytics · CVSS 6.5 Medium · Not analysed yet · Published 3 Nov 2022 · Tags: Information disclosure
- [IBM Cognos Analytics: IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to an XML External Entity…](https://agentprime.io/advisories/CVE-2022-36773.md)
  `CVE-2022-36773` · CVE record: IBM Cognos Analytics · CVSS 7.1 High · Not analysed yet · Published 1 Sept 2022
- [IBM Cognos Analytics: IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to a denial of service via…](https://agentprime.io/advisories/CVE-2022-30614.md)
  `CVE-2022-30614` · CVE record: IBM Cognos Analytics · CVSS 6.5 Medium · Not analysed yet · Published 1 Sept 2022
- [IBM Cognos Analytics: IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could allow a local attacker to obtain…](https://agentprime.io/advisories/CVE-2021-39045.md)
  `CVE-2021-39045` · CVE record: IBM Cognos Analytics · CVSS 6.2 Medium · Not analysed yet · Published 1 Sept 2022
- [IBM Cognos Analytics: IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 stores user credentials in plain clear…](https://agentprime.io/advisories/CVE-2021-39009.md)
  `CVE-2021-39009` · CVE record: IBM Cognos Analytics · CVSS 4.4 Medium · Not analysed yet · Published 1 Sept 2022
- [IBM Cognos Analytics: IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to cross-site request…](https://agentprime.io/advisories/CVE-2021-29823.md)
  `CVE-2021-29823` · CVE record: IBM Cognos Analytics · CVSS 4.3 Medium · Not analysed yet · Published 1 Sept 2022
- [IBM Cognos Analytics: IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to cross-site request…](https://agentprime.io/advisories/CVE-2021-20468.md)
  `CVE-2021-20468` · CVE record: IBM Cognos Analytics · CVSS 4.3 Medium · Not analysed yet · Published 1 Sept 2022
- [IBM Cognos Analytics: IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to cross-site request…](https://agentprime.io/advisories/CVE-2020-4301.md)
  `CVE-2020-4301` · CVE record: IBM Cognos Analytics · CVSS 4.3 Medium · Not analysed yet · Published 1 Sept 2022
- [IBM Cognos Analytics: IBM Planning Analytics 2.0 and IBM Cognos Analytics 11.2.1, 11.2.0…](https://agentprime.io/advisories/CVE-2021-39047.md)
  `CVE-2021-39047` · CVE record: IBM Cognos Analytics · CVSS 6.1 Medium · Not analysed yet · Published 24 Jun 2022
- [IBM Cognos Analytics: IBM Cognos Analytics 11.2.1, 11.2.0, and 11.1.7 could allow a remote attacker to upload…](https://agentprime.io/advisories/CVE-2021-38945.md)
  `CVE-2021-38945` · CVE record: IBM Cognos Analytics · CVSS 6.3 Medium · Not analysed yet · Published 24 Jun 2022
- [IBM Cognos Analytics: IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could allow a low level user to obtain…](https://agentprime.io/advisories/CVE-2021-29768.md)
  `CVE-2021-29768` · CVE record: IBM Cognos Analytics · CVSS 4.3 Medium · Not analysed yet · Published 24 Jun 2022
- [IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2021-38946.md)
  `CVE-2021-38946` · CVE record: IBM Cognos Analytics · CVSS 5.4 Medium · Not analysed yet · Published 22 Apr 2022
- [IBM Cognos Analytics: IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 could allow an authenticated user to view…](https://agentprime.io/advisories/CVE-2021-38905.md)
  `CVE-2021-38905` · CVE record: IBM Cognos Analytics · CVSS 4.3 Medium · Not analysed yet · Published 22 Apr 2022
- [IBM Cognos Analytics: IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 could allow a remote attacker to obtain…](https://agentprime.io/advisories/CVE-2021-38904.md)
  `CVE-2021-38904` · CVE record: IBM Cognos Analytics · CVSS 4.6 Medium · Not analysed yet · Published 22 Apr 2022
- [IBM Cognos Analytics: IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to cross-site scripting…](https://agentprime.io/advisories/CVE-2021-38903.md)
  `CVE-2021-38903` · CVE record: IBM Cognos Analytics · CVSS 5.4 Medium · Not analysed yet · Published 22 Apr 2022
- [IBM Cognos Analytics: IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to cross-site request…](https://agentprime.io/advisories/CVE-2021-38886.md)
  `CVE-2021-38886` · CVE record: IBM Cognos Analytics · CVSS 4.3 Medium · Not analysed yet · Published 22 Apr 2022
- [IBM Cognos Analytics: IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to priviledge escalation…](https://agentprime.io/advisories/CVE-2021-29824.md)
  `CVE-2021-29824` · CVE record: IBM Cognos Analytics · CVSS 3.1 Low · Not analysed yet · Published 22 Apr 2022
- [IBM Cognos Analytics: IBM Cognos Analytics PowerPlay (IBM Cognos Analytics 11.1.7, 11.2.0…](https://agentprime.io/advisories/CVE-2021-20464.md)
  `CVE-2021-20464` · CVE record: IBM Cognos Analytics · CVSS 6.5 Medium · Not analysed yet · Published 22 Apr 2022
- [IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2021-38909.md)
  `CVE-2021-38909` · CVE record: IBM Cognos Analytics · CVSS 5.4 Medium · Not analysed yet · Published 3 Dec 2021
- [IBM Cognos Analytics: IBM Cognos Analytics 11.1.7 and 11.2.0 could allow an authenticated to view or edit a…](https://agentprime.io/advisories/CVE-2021-29867.md)
  `CVE-2021-29867` · CVE record: IBM Cognos Analytics · CVSS 5.4 Medium · Not analysed yet · Published 3 Dec 2021
- [IBM Cognos Analytics: IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site request forgery (CSRF)…](https://agentprime.io/advisories/CVE-2021-29756.md)
  `CVE-2021-29756` · CVE record: IBM Cognos Analytics · CVSS 4.3 Medium · Not analysed yet · Published 3 Dec 2021
- [IBM Cognos Analytics: IBM Cognos Analytics 11.1.7 and 11.2.0 could be vulnerable to client side vulnerabilties…](https://agentprime.io/advisories/CVE-2021-29719.md)
  `CVE-2021-29719` · CVE record: IBM Cognos Analytics · CVSS 5.3 Medium · Not analysed yet · Published 3 Dec 2021
- [IBM Cognos Analytics: IBM Cognos Analytics 11.1.7 and 11.2.0 could allow a low level user to reas of the…](https://agentprime.io/advisories/CVE-2021-29716.md)
  `CVE-2021-29716` · CVE record: IBM Cognos Analytics · CVSS 2.7 Low · Not analysed yet · Published 3 Dec 2021

Older: <https://agentprime.io/advisories/technology/ibm-cognos-analytics.md?cursor=WyIyMDIxLTEyLTAzVDE3OjAwOjI1Ljc3ODAwMFoiLCJDVkUtMjAyMS0yOTcxNiJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=ibm-cognos-analytics>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/ibm-cognos-analytics/>. Everything for agents: <https://agentprime.io/llms.txt>.