# IBM Cognos Analytics.

Every CVE that names IBM Cognos Analytics among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2021-20493.md)
  `CVE-2021-20493` · CVE record: IBM Cognos Analytics · CVSS 6.1 Medium · Not analysed yet · Published 3 Dec 2021
- [IBM Cognos Analytics: IBM Cognos Analytics 11.1.7 and 11.2.0 does not require that users should have strong…](https://agentprime.io/advisories/CVE-2021-20470.md)
  `CVE-2021-20470` · CVE record: IBM Cognos Analytics · CVSS 5.9 Medium · Not analysed yet · Published 3 Dec 2021
- [IBM Cognos Analytics: IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to priviledge escalation where a…](https://agentprime.io/advisories/CVE-2021-29745.md)
  `CVE-2021-29745` · CVE record: IBM Cognos Analytics · CVSS 5.4 Medium · Not analysed yet · Published 15 Oct 2021
- [IBM Cognos Analytics: IBM Cognos Analytics 11.1.7 and 11.2.0 could allow an authenticated user to execute code…](https://agentprime.io/advisories/CVE-2021-29679.md)
  `CVE-2021-29679` · CVE record: IBM Cognos Analytics · CVSS 8.8 High · Not analysed yet · Published 15 Oct 2021
- [IBM Cognos Analytics: IBM Cognos Analytics 11.1.7 and 11.2.0 contains locally cached browser data…](https://agentprime.io/advisories/CVE-2020-4951.md)
  `CVE-2020-4951` · CVE record: IBM Cognos Analytics · CVSS 4.0 Medium · Not analysed yet · Published 15 Oct 2021
- [IBM Cognos Analytics: IBM Cognos Analytics 10.0 and 11.1 is susceptible to a weakness in the implementation of…](https://agentprime.io/advisories/CVE-2021-20461.md)
  `CVE-2021-20461` · CVE record: IBM Cognos Analytics · CVSS 4.3 Medium · Not analysed yet · Published 30 Jun 2021
- [IBM Cognos Analytics: IBM Cognos Analytics 11.0 and 11.1 DQM API allows submitting of all control requests in…](https://agentprime.io/advisories/CVE-2020-4561.md)
  `CVE-2020-4561` · CVE record: IBM Cognos Analytics · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 May 2021
- [IBM Cognos Analytics: IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to inject malicious HTML…](https://agentprime.io/advisories/CVE-2020-4520.md)
  `CVE-2020-4520` · CVE record: IBM Cognos Analytics · CVSS 7.1 High · Not analysed yet · Published 31 May 2021
- [IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2020-4354.md)
  `CVE-2020-4354` · CVE record: IBM Cognos Analytics · CVSS 5.4 Medium · Not analysed yet · Published 31 May 2021
- [IBM Cognos Analytics: IBM Cognos Analytics 11.0 and 11.1 is vulnerable to an XML External Entity Injection…](https://agentprime.io/advisories/CVE-2020-4300.md)
  `CVE-2020-4300` · CVE record: IBM Cognos Analytics · CVSS 8.2 High · Not analysed yet · Published 31 May 2021
- [IBM Cognos Analytics: IBM Cognos Analytics 11.0 and 11.1 is vulnerable to an XML External Entity Injection…](https://agentprime.io/advisories/CVE-2019-4730.md)
  `CVE-2019-4730` · CVE record: IBM Cognos Analytics · CVSS 7.1 High · Not analysed yet · Published 31 May 2021
- [IBM Cognos Analytics: IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain credentials…](https://agentprime.io/advisories/CVE-2019-4724.md)
  `CVE-2019-4724` · CVE record: IBM Cognos Analytics · CVSS 4.6 Medium · Not analysed yet · Published 31 May 2021
- [IBM Cognos Analytics: IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain credentials…](https://agentprime.io/advisories/CVE-2019-4723.md)
  `CVE-2019-4723` · CVE record: IBM Cognos Analytics · CVSS 4.6 Medium · Not analysed yet · Published 31 May 2021
- [IBM Cognos Analytics: IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive…](https://agentprime.io/advisories/CVE-2019-4722.md)
  `CVE-2019-4722` · CVE record: IBM Cognos Analytics · CVSS 4.3 Medium · Not analysed yet · Published 31 May 2021
- [IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2019-4653.md)
  `CVE-2019-4653` · CVE record: IBM Cognos Analytics · CVSS 5.4 Medium · Not analysed yet · Published 31 May 2021
- [IBM Cognos Analytics: IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive…](https://agentprime.io/advisories/CVE-2019-4471.md)
  `CVE-2019-4471` · CVE record: IBM Cognos Analytics · CVSS 5.3 Medium · Not analysed yet · Published 31 May 2021
- [IBM Cognos Analytics: IBM Cognos Analytics 11.0 and 11.1 could be vulnerable to a denial of service attack by…](https://agentprime.io/advisories/CVE-2020-4388.md)
  `CVE-2020-4388` · CVE record: IBM Cognos Analytics · CVSS 6.5 Medium · Not analysed yet · Published 12 Oct 2020
- [IBM Cognos Analytics: IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to execute arbitrary…](https://agentprime.io/advisories/CVE-2020-4302.md)
  `CVE-2020-4302` · CVE record: IBM Cognos Analytics · CVSS 5.5 Medium · Not analysed yet · Published 12 Oct 2020
- [IBM Cognos Anaytics 11.0 and 11.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data.](https://agentprime.io/advisories/CVE-2020-4377.md)
  `CVE-2020-4377` · CVE record: IBM Cognos Analytics · CVSS 8.2 High · Not analysed yet · Published 3 Aug 2020
- [IBM Cognos Analytics: IBM Cognos Analytics 11.0 and 11.1 is vulnerable to privlege escalation where the "My…](https://agentprime.io/advisories/CVE-2019-4589.md)
  `CVE-2019-4589` · CVE record: IBM Cognos Analytics · CVSS 4.6 Medium · Not analysed yet · Published 3 Aug 2020
- [IBM Cognos Analytics: IBM Cognos Analytics 11.0 and 11.1 is susceptible to an information disclosure…](https://agentprime.io/advisories/CVE-2019-4366.md)
  `CVE-2019-4366` · CVE record: IBM Cognos Analytics · CVSS 2.9 Low · Not analysed yet · Published 3 Aug 2020
- [IBM Cognos Analytics: IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive…](https://agentprime.io/advisories/CVE-2019-4729.md)
  `CVE-2019-4729` · CVE record: IBM Cognos Analytics · CVSS 4.3 Medium · Not analysed yet · Published 27 Apr 2020
- [IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2019-4623.md)
  `CVE-2019-4623` · CVE record: IBM Cognos Analytics · CVSS 5.4 Medium · Not analysed yet · Published 30 Dec 2019
- [IBM Cognos Analytics: IBM Cognos Analytics 11.0 and 11.1 allows overly permissive cross-origin resource sharing…](https://agentprime.io/advisories/CVE-2019-4343.md)
  `CVE-2019-4343` · CVE record: IBM Cognos Analytics · CVSS 6.5 Medium · Not analysed yet · Published 30 Dec 2019
- [IBM Cognos Analytics 11.0 and 11.0 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2019-4555.md)
  `CVE-2019-4555` · CVE record: IBM Cognos Analytics · CVSS 5.4 Medium · Not analysed yet · Published 20 Dec 2019
- [IBM Cognos Analytics: IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site request forgery which…](https://agentprime.io/advisories/CVE-2019-4231.md)
  `CVE-2019-4231` · CVE record: IBM Cognos Analytics · CVSS 4.3 Medium · Not analysed yet · Published 20 Dec 2019
- [IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2019-4645.md)
  `CVE-2019-4645` · CVE record: IBM Cognos Analytics · CVSS 6.1 Medium · Not analysed yet · Published 9 Nov 2019
- [IBM Cognos Analytics: IBM Cognos Analytics 11.0 and 11.1 could reveal sensitive information to an authenticated…](https://agentprime.io/advisories/CVE-2019-4334.md)
  `CVE-2019-4334` · CVE record: IBM Cognos Analytics · CVSS 4.3 Medium · Not analysed yet · Published 9 Nov 2019
- [IBM Cognos Analytics: IBM Cognos Analytics 11.0 and 11.1 is vulnerable to a XML External Entity Injection (XXE)…](https://agentprime.io/advisories/CVE-2018-1721.md)
  `CVE-2018-1721` · CVE record: IBM Cognos Analytics · CVSS 8.3 High · Not analysed yet · Published 9 Nov 2019
- [IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2019-4342.md)
  `CVE-2019-4342` · CVE record: IBM Cognos Analytics · CVSS 5.4 Medium · Not analysed yet · Published 17 Sept 2019
- [IBM Cognos Analytics: IBM Cognos Analytics 11.0, and 11.1 is vulnerable to a denial of service attack that…](https://agentprime.io/advisories/CVE-2019-4183.md)
  `CVE-2019-4183` · CVE record: IBM Cognos Analytics · CVSS 5.9 Medium · Not analysed yet · Published 17 Sept 2019
- [IBM Cognos Analytics 11.0, 11.1.0, and 11.1.1 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2019-4139.md)
  `CVE-2019-4139` · CVE record: IBM Cognos Analytics · CVSS 5.4 Medium · Not analysed yet · Published 29 May 2019
- [IBM Cognos Analytics 11 could allow a remote attacker to traverse directories on the system.](https://agentprime.io/advisories/CVE-2019-4178.md)
  `CVE-2019-4178` · CVE record: IBM Cognos Analytics · CVSS 6.4 Medium · Not analysed yet · Published 15 Apr 2019
- [IBM Cognos Analytics: IBM Cognos Analytics 11 Configuration tool, under certain circumstances…](https://agentprime.io/advisories/CVE-2018-1842.md)
  `CVE-2018-1842` · CVE record: IBM Cognos Analytics · CVSS 3.6 Low · Not analysed yet · Published 9 Nov 2018
- [IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2018-1413.md)
  `CVE-2018-1413` · CVE record: IBM Cognos Analytics · No CVSS score · Not analysed yet · Published 7 May 2018
- [IBM Cognos Analytics: IBM Predictive Solutions Foundation (IBM Cognos Analytics 11.0) reveals sensitive…](https://agentprime.io/advisories/CVE-2016-9711.md)
  `CVE-2016-9711` · CVE record: IBM Cognos Analytics · CVSS 5.3 Medium · Not analysed yet · Published 22 Mar 2018
- [IBM Cognos Analytics: IBM Cognos Analytics 11.0 could produce results in temporary files that contain highly…](https://agentprime.io/advisories/CVE-2017-1784.md)
  `CVE-2017-1784` · CVE record: IBM Cognos Analytics · No CVSS score · Not analysed yet · Published 29 Jan 2018
- [IBM Cognos Analytics: IBM Cognos Analytics 11.0 could allow a local user to change parameters set from the…](https://agentprime.io/advisories/CVE-2017-1783.md)
  `CVE-2017-1783` · CVE record: IBM Cognos Analytics · No CVSS score · Not analysed yet · Published 29 Jan 2018
- [IBM Cognos Analytics: IBM Cognos Analytics 11.0 could store cached credentials locally that could be obtained…](https://agentprime.io/advisories/CVE-2017-1779.md)
  `CVE-2017-1779` · CVE record: IBM Cognos Analytics · No CVSS score · Not analysed yet · Published 29 Jan 2018
- [IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2017-1535.md)
  `CVE-2017-1535` · CVE record: IBM Cognos Analytics · No CVSS score · Not analysed yet · Published 29 Aug 2017
- [IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2017-1485.md)
  `CVE-2017-1485` · CVE record: IBM Cognos Analytics · No CVSS score · Not analysed yet · Published 29 Aug 2017
- [IBM Cognos Analytics 11.0 could allow a remote attacker to hijack the clicking action of the victim.](https://agentprime.io/advisories/CVE-2017-1428.md)
  `CVE-2017-1428` · CVE record: IBM Cognos Analytics · No CVSS score · Not analysed yet · Published 29 Aug 2017
- [IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2017-1427.md)
  `CVE-2017-1427` · CVE record: IBM Cognos Analytics · No CVSS score · Not analysed yet · Published 29 Aug 2017

Newest: <https://agentprime.io/advisories/technology/ibm-cognos-analytics.md>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=ibm-cognos-analytics&cursor=WyIyMDIxLTEyLTAzVDE3OjAwOjI1Ljc3ODAwMFoiLCJDVkUtMjAyMS0yOTcxNiJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/ibm-cognos-analytics/?cursor=WyIyMDIxLTEyLTAzVDE3OjAwOjI1Ljc3ODAwMFoiLCJDVkUtMjAyMS0yOTcxNiJd>. Everything for agents: <https://agentprime.io/llms.txt>.