Advisories · Technology

IBM Cognos Analytics.

Every CVE that names IBM Cognos Analytics among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-36076 CVE record

CVSS 4.3 Medium

IBM Cognos Analytics versions 12.0.4 and 12.1.3 is affected by security vulnerabilities
- IBM Cognos Analytics
- CWE-540
Not analysed yet 18 Sept 2026
CVE-2025-33147 CVE record

CVSS 5.9 Medium

IBM Cognos Analytics versions 12.0.4 and 12.1.3 is affected by security vulnerabilities
- IBM Cognos Analytics
- Weak cryptography or TLS
Not analysed yet 18 Sept 2026
CVE-2024-56344 CVE record

CVSS 5.9 Medium

IBM Cognos Analytics 12.0.4 and 12.1.3 versions are affected by security vulnerabilities
- IBM Cognos Analytics
- Weak cryptography or TLS
Not analysed yet 18 Sept 2026
CVE-2026-7884 CVE record

CVSS 5.4 Medium

IBM Cognos Analytics versions 12.0.4 and 12.1.3 is affected by security vulnerabilities
- IBM Cognos Analytics
- Cross-site scripting (XSS)
Not analysed yet 14 Sept 2026
CVE-2026-15995 CVE record

CVSS 5.4 Medium

IBM Cognos Analytics 12.1.3 general availability package contains a data integrity issue in the Agentic AI assistant that may cause incorrect report summaries or report-processing errors under concur…
- IBM Cognos Analytics
- Race condition
Not analysed yet 17 Jul 2026
CVE-2025-3633 CVE record

CVSS 5.4 Medium

IBM Cognos Analytics is affected by multiple security vulnerabilities
- IBM Cognos Analytics
- IBM Cognos Transformer
- Cross-site scripting (XSS)
Not analysed yet 27 May 2026
CVE-2025-36126 CVE record

CVSS 6.4 Medium

IBM Cognos Analytics is affected by Cross-site scripting.
- IBM Cognos Analytics
- IBM Cognos Transformer
- Cross-site scripting (XSS)
Not analysed yet 26 May 2026
CVE-2024-52900 CVE record

CVSS 6.4 Medium

IBM Cognos Analytics cross-site scripting
- IBM Cognos Analytics
- Cross-site scripting (XSS)
Not analysed yet 28 Jun 2025
CVE-2025-0923 CVE record

CVSS 5.3 Medium

IBM Cognos Analytics information disclosure
- IBM Cognos Analytics
- CWE-540
Not analysed yet 11 Jun 2025
CVE-2025-0917 CVE record

CVSS 5.5 Medium

IBM Cognos Analytics cross-site scripting
- IBM Cognos Analytics
- Cross-site scripting (XSS)
Not analysed yet 11 Jun 2025
CVE-2025-25032 CVE record

CVSS 7.5 High

IBM Cognos Analytics denial of service
- IBM Cognos Analytics
- Denial of service
Not analysed yet 11 Jun 2025
CVE-2024-56340 CVE record

CVSS 6.5 Medium

IBM Cognos Analytics path traversal
- IBM Cognos Analytics
- Path traversal
Not analysed yet 28 Feb 2025
CVE-2025-0823 CVE record

CVSS 6.5 Medium

IBM MQ path traversal
- IBM Cognos Analytics
- Path traversal
Not analysed yet 28 Feb 2025
CVE-2024-49352 CVE record

CVSS 7.1 High

IBM Cognos Anaytics XML external entity injection
- IBM Cognos Analytics
- XML external entities (XXE)
Not analysed yet 5 Feb 2025
CVE-2024-40695 CVE record

CVSS 8.0 High

IBM Cognos Analytics file upload
- IBM Cognos Analytics
- Unrestricted file upload
Not analysed yet 20 Dec 2024
CVE-2024-51466 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

IBM Cognos Analytics expression language injection
- IBM Cognos Analytics
- Code injection
Not analysed yet 20 Dec 2024
CVE-2024-25042 CVE record

CVSS 5.4 Medium

IBM Cognos Analytics cross-site scripting
- IBM Cognos Analytics
- Cross-site scripting (XSS)
Not analysed yet 18 Dec 2024
CVE-2024-45082 CVE record

CVSS 6.8 Medium

IBM Cognos Analytics HTTP open redirection
- IBM Cognos Analytics
- Open redirect
Not analysed yet 18 Dec 2024
CVE-2024-41752 CVE record

CVSS 5.4 Medium

IBM Cognos Analytics HTML injection
- IBM Cognos Analytics
- Cross-site scripting (XSS)
Not analysed yet 18 Dec 2024
CVE-2024-40703 CVE record

CVSS 5.5 Medium

IBM Cognos Analytics information disclosure
- IBM Cognos Analytics
- IBM Cognos Analytics Reports
- Hard-coded credentials
Not analysed yet 22 Sept 2024
CVE-2024-25041 CVE record

CVSS 5.4 Medium

IBM Cognos Analytics cross-site scripting
- IBM Cognos Analytics
- Cross-site scripting (XSS)
Not analysed yet 28 Jun 2024
CVE-2024-25053 CVE record

CVSS 5.9 Medium

IBM Cognos Analytics improper certificate validation
- IBM Cognos Analytics
- Weak cryptography or TLS
Not analysed yet 28 Jun 2024
CVE-2024-25047 CVE record

CVSS 8.6 High

IBM Cognos Analytics log injection
- IBM Cognos Analytics
- Other injection
Not analysed yet 2 May 2024
CVE-2023-43051 CVE record

CVSS 5.4 Medium

IBM Cognos Analytics cross-site scripting
- IBM Cognos Analytics
- Cross-site scripting (XSS)
Not analysed yet 24 Feb 2024
CVE-2022-34357 CVE record

CVSS 6.5 Medium

IBM Cognos Analytics Mobile Server denial of service
- IBM Cognos Analytics
- Denial of service
Not analysed yet 24 Feb 2024
CVE-2023-30996 CVE record

CVSS 5.3 Medium

IBM Cognos Analytics cross-origin resource sharing
- IBM Cognos Analytics
- CWE-346
Not analysed yet 24 Feb 2024
CVE-2023-32344 CVE record

CVSS 4.3 Medium

IBM Cognos Analytics cross-site request forgery
- IBM Cognos Analytics
- Cross-site request forgery (CSRF)
Not analysed yet 24 Feb 2024
CVE-2023-38359 CVE record

CVSS 6.1 Medium

IBM Cognos Analytics cross-site scripting
- IBM Cognos Analytics
- Cross-site scripting (XSS)
Not analysed yet 24 Feb 2024
CVE-2023-35011 CVE record

CVSS 5.4 Medium

IBM Cognos Analytics server-side request forgey
- IBM Cognos Analytics
- Server-side request forgery (SSRF)
Not analysed yet 16 Aug 2023
CVE-2023-35009 CVE record

CVSS 5.3 Medium

IBM Cognos Analytics information disclosure
- IBM Cognos Analytics
- Information disclosure
Not analysed yet 16 Aug 2023
CVE-2023-28530 CVE record

CVSS 5.4 Medium

IBM Cognos Analytics cross-site scripting
- IBM Cognos Analytics
- Cross-site scripting (XSS)
Not analysed yet 22 Jul 2023
CVE-2023-25929 CVE record

CVSS 4.6 Medium

IBM Cognos Analytics cross-site scripting
- IBM Cognos Analytics
- Cross-site scripting (XSS)
Not analysed yet 22 Jul 2023
CVE-2021-39036 CVE record

CVSS 6.1 Medium

IBM Cognos Analytics cross-site scripting
- IBM Cognos Analytics
- Cross-site scripting (XSS)
Not analysed yet 12 May 2023
CVE-2022-39160 CVE record

CVSS 6.1 Medium

IBM Cognos Analytics cross-site scripting
- IBM Cognos Analytics
- Cross-site scripting (XSS)
Not analysed yet 19 Dec 2022
CVE-2022-43883 CVE record

CVSS 6.5 Medium

IBM Cognos Analytics data manipulation
- IBM Cognos Analytics
Not analysed yet 19 Dec 2022
CVE-2022-43887 CVE record

CVSS 5.3 Medium

IBM Cognos Analytics information disclosure
- IBM Cognos Analytics
- Information disclosure
Not analysed yet 19 Dec 2022
CVE-2022-38708 CVE record

CVSS 6.5 Medium

IBM Cognos Analytics server-side request forgery
- IBM Cognos Analytics
- Server-side request forgery (SSRF)
Not analysed yet 19 Dec 2022
CVE-2022-34339 CVE record

CVSS 6.5 Medium

Cleartext storage of sensitive information in IBM Cognos Analytics
- IBM Cognos Analytics
- Information disclosure
Not analysed yet 3 Nov 2022
CVE-2022-36773 CVE record

CVSS 7.1 High

IBM Cognos Analytics: IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to an XML External Entity…
- IBM Cognos Analytics
Not analysed yet 1 Sept 2022
CVE-2022-30614 CVE record

CVSS 6.5 Medium

IBM Cognos Analytics: IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to a denial of service via…
- IBM Cognos Analytics
Not analysed yet 1 Sept 2022
CVE-2021-39045 CVE record

CVSS 6.2 Medium

IBM Cognos Analytics: IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could allow a local attacker to obtain…
- IBM Cognos Analytics
Not analysed yet 1 Sept 2022
CVE-2021-39009 CVE record

CVSS 4.4 Medium

IBM Cognos Analytics: IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 stores user credentials in plain clear…
- IBM Cognos Analytics
Not analysed yet 1 Sept 2022
CVE-2021-29823 CVE record

CVSS 4.3 Medium

IBM Cognos Analytics: IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to cross-site request…
- IBM Cognos Analytics
Not analysed yet 1 Sept 2022
CVE-2021-20468 CVE record

CVSS 4.3 Medium

IBM Cognos Analytics: IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to cross-site request…
- IBM Cognos Analytics
Not analysed yet 1 Sept 2022
CVE-2020-4301 CVE record

CVSS 4.3 Medium

IBM Cognos Analytics: IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to cross-site request…
- IBM Cognos Analytics
Not analysed yet 1 Sept 2022
CVE-2021-39047 CVE record

CVSS 6.1 Medium

IBM Cognos Analytics: IBM Planning Analytics 2.0 and IBM Cognos Analytics 11.2.1, 11.2.0…
- IBM Cognos Analytics
Not analysed yet 24 Jun 2022
CVE-2021-38945 CVE record

CVSS 6.3 Medium

IBM Cognos Analytics: IBM Cognos Analytics 11.2.1, 11.2.0, and 11.1.7 could allow a remote attacker to upload…
- IBM Cognos Analytics
Not analysed yet 24 Jun 2022
CVE-2021-29768 CVE record

CVSS 4.3 Medium

IBM Cognos Analytics: IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could allow a low level user to obtain…
- IBM Cognos Analytics
Not analysed yet 24 Jun 2022
CVE-2021-38946 CVE record

CVSS 5.4 Medium

IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to cross-site scripting.
- IBM Cognos Analytics
Not analysed yet 22 Apr 2022
CVE-2021-38905 CVE record

CVSS 4.3 Medium

IBM Cognos Analytics: IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 could allow an authenticated user to view…
- IBM Cognos Analytics
Not analysed yet 22 Apr 2022
CVE-2021-38904 CVE record

CVSS 4.6 Medium

IBM Cognos Analytics: IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 could allow a remote attacker to obtain…
- IBM Cognos Analytics
Not analysed yet 22 Apr 2022
CVE-2021-38903 CVE record

CVSS 5.4 Medium

IBM Cognos Analytics: IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to cross-site scripting…
- IBM Cognos Analytics
Not analysed yet 22 Apr 2022
CVE-2021-38886 CVE record

CVSS 4.3 Medium

IBM Cognos Analytics: IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to cross-site request…
- IBM Cognos Analytics
Not analysed yet 22 Apr 2022
CVE-2021-29824 CVE record

CVSS 3.1 Low

IBM Cognos Analytics: IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to priviledge escalation…
- IBM Cognos Analytics
Not analysed yet 22 Apr 2022
CVE-2021-20464 CVE record

CVSS 6.5 Medium

IBM Cognos Analytics: IBM Cognos Analytics PowerPlay (IBM Cognos Analytics 11.1.7, 11.2.0…
- IBM Cognos Analytics
Not analysed yet 22 Apr 2022
CVE-2021-38909 CVE record

CVSS 5.4 Medium

IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site scripting.
- IBM Cognos Analytics
Not analysed yet 3 Dec 2021
CVE-2021-29867 CVE record

CVSS 5.4 Medium

IBM Cognos Analytics: IBM Cognos Analytics 11.1.7 and 11.2.0 could allow an authenticated to view or edit a…
- IBM Cognos Analytics
Not analysed yet 3 Dec 2021
CVE-2021-29756 CVE record

CVSS 4.3 Medium

IBM Cognos Analytics: IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site request forgery (CSRF)…
- IBM Cognos Analytics
Not analysed yet 3 Dec 2021
CVE-2021-29719 CVE record

CVSS 5.3 Medium

IBM Cognos Analytics: IBM Cognos Analytics 11.1.7 and 11.2.0 could be vulnerable to client side vulnerabilties…
- IBM Cognos Analytics
Not analysed yet 3 Dec 2021
CVE-2021-29716 CVE record

CVSS 2.7 Low

IBM Cognos Analytics: IBM Cognos Analytics 11.1.7 and 11.2.0 could allow a low level user to reas of the…
- IBM Cognos Analytics
Not analysed yet 3 Dec 2021