Advisories · Technology

IBM Cognos Analytics.

Every CVE that names IBM Cognos Analytics among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2021-20493 CVE record

CVSS 6.1 Medium

IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site scripting.
- IBM Cognos Analytics
Not analysed yet 3 Dec 2021
CVE-2021-20470 CVE record

CVSS 5.9 Medium

IBM Cognos Analytics: IBM Cognos Analytics 11.1.7 and 11.2.0 does not require that users should have strong…
- IBM Cognos Analytics
Not analysed yet 3 Dec 2021
CVE-2021-29745 CVE record

CVSS 5.4 Medium

IBM Cognos Analytics: IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to priviledge escalation where a…
- IBM Cognos Analytics
Not analysed yet 15 Oct 2021
CVE-2021-29679 CVE record

CVSS 8.8 High

IBM Cognos Analytics: IBM Cognos Analytics 11.1.7 and 11.2.0 could allow an authenticated user to execute code…
- IBM Cognos Analytics
Not analysed yet 15 Oct 2021
CVE-2020-4951 CVE record

CVSS 4.0 Medium

IBM Cognos Analytics: IBM Cognos Analytics 11.1.7 and 11.2.0 contains locally cached browser data…
- IBM Cognos Analytics
Not analysed yet 15 Oct 2021
CVE-2021-20461 CVE record

CVSS 4.3 Medium

IBM Cognos Analytics: IBM Cognos Analytics 10.0 and 11.1 is susceptible to a weakness in the implementation of…
- IBM Cognos Analytics
Not analysed yet 30 Jun 2021
CVE-2020-4561 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

IBM Cognos Analytics: IBM Cognos Analytics 11.0 and 11.1 DQM API allows submitting of all control requests in…
- IBM Cognos Analytics
Not analysed yet 31 May 2021
CVE-2020-4520 CVE record

CVSS 7.1 High

IBM Cognos Analytics: IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to inject malicious HTML…
- IBM Cognos Analytics
Not analysed yet 31 May 2021
CVE-2020-4354 CVE record

CVSS 5.4 Medium

IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting.
- IBM Cognos Analytics
Not analysed yet 31 May 2021
CVE-2020-4300 CVE record

CVSS 8.2 High

IBM Cognos Analytics: IBM Cognos Analytics 11.0 and 11.1 is vulnerable to an XML External Entity Injection…
- IBM Cognos Analytics
Not analysed yet 31 May 2021
CVE-2019-4730 CVE record

CVSS 7.1 High

IBM Cognos Analytics: IBM Cognos Analytics 11.0 and 11.1 is vulnerable to an XML External Entity Injection…
- IBM Cognos Analytics
Not analysed yet 31 May 2021
CVE-2019-4724 CVE record

CVSS 4.6 Medium

IBM Cognos Analytics: IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain credentials…
- IBM Cognos Analytics
Not analysed yet 31 May 2021
CVE-2019-4723 CVE record

CVSS 4.6 Medium

IBM Cognos Analytics: IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain credentials…
- IBM Cognos Analytics
Not analysed yet 31 May 2021
CVE-2019-4722 CVE record

CVSS 4.3 Medium

IBM Cognos Analytics: IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive…
- IBM Cognos Analytics
Not analysed yet 31 May 2021
CVE-2019-4653 CVE record

CVSS 5.4 Medium

IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting.
- IBM Cognos Analytics
Not analysed yet 31 May 2021
CVE-2019-4471 CVE record

CVSS 5.3 Medium

IBM Cognos Analytics: IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive…
- IBM Cognos Analytics
Not analysed yet 31 May 2021
CVE-2020-4388 CVE record

CVSS 6.5 Medium

IBM Cognos Analytics: IBM Cognos Analytics 11.0 and 11.1 could be vulnerable to a denial of service attack by…
- IBM Cognos Analytics
Not analysed yet 12 Oct 2020
CVE-2020-4302 CVE record

CVSS 5.5 Medium

IBM Cognos Analytics: IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to execute arbitrary…
- IBM Cognos Analytics
Not analysed yet 12 Oct 2020
CVE-2020-4377 CVE record

CVSS 8.2 High

IBM Cognos Anaytics 11.0 and 11.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data.
- IBM Cognos Analytics
Not analysed yet 3 Aug 2020
CVE-2019-4589 CVE record

CVSS 4.6 Medium

IBM Cognos Analytics: IBM Cognos Analytics 11.0 and 11.1 is vulnerable to privlege escalation where the "My…
- IBM Cognos Analytics
Not analysed yet 3 Aug 2020
CVE-2019-4366 CVE record

CVSS 2.9 Low

IBM Cognos Analytics: IBM Cognos Analytics 11.0 and 11.1 is susceptible to an information disclosure…
- IBM Cognos Analytics
Not analysed yet 3 Aug 2020
CVE-2019-4729 CVE record

CVSS 4.3 Medium

IBM Cognos Analytics: IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive…
- IBM Cognos Analytics
Not analysed yet 27 Apr 2020
CVE-2019-4623 CVE record

CVSS 5.4 Medium

IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting.
- IBM Cognos Analytics
Not analysed yet 30 Dec 2019
CVE-2019-4343 CVE record

CVSS 6.5 Medium

IBM Cognos Analytics: IBM Cognos Analytics 11.0 and 11.1 allows overly permissive cross-origin resource sharing…
- IBM Cognos Analytics
Not analysed yet 30 Dec 2019
CVE-2019-4555 CVE record

CVSS 5.4 Medium

IBM Cognos Analytics 11.0 and 11.0 is vulnerable to cross-site scripting.
- IBM Cognos Analytics
Not analysed yet 20 Dec 2019
CVE-2019-4231 CVE record

CVSS 4.3 Medium

IBM Cognos Analytics: IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site request forgery which…
- IBM Cognos Analytics
Not analysed yet 20 Dec 2019
CVE-2019-4645 CVE record

CVSS 6.1 Medium

IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting.
- IBM Cognos Analytics
Not analysed yet 9 Nov 2019
CVE-2019-4334 CVE record

CVSS 4.3 Medium

IBM Cognos Analytics: IBM Cognos Analytics 11.0 and 11.1 could reveal sensitive information to an authenticated…
- IBM Cognos Analytics
Not analysed yet 9 Nov 2019
CVE-2018-1721 CVE record

CVSS 8.3 High

IBM Cognos Analytics: IBM Cognos Analytics 11.0 and 11.1 is vulnerable to a XML External Entity Injection (XXE)…
- IBM Cognos Analytics
Not analysed yet 9 Nov 2019
CVE-2019-4342 CVE record

CVSS 5.4 Medium

IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting.
- IBM Cognos Analytics
Not analysed yet 17 Sept 2019
CVE-2019-4183 CVE record

CVSS 5.9 Medium

IBM Cognos Analytics: IBM Cognos Analytics 11.0, and 11.1 is vulnerable to a denial of service attack that…
- IBM Cognos Analytics
Not analysed yet 17 Sept 2019
CVE-2019-4139 CVE record

CVSS 5.4 Medium

IBM Cognos Analytics 11.0, 11.1.0, and 11.1.1 is vulnerable to cross-site scripting.
- IBM Cognos Analytics
Not analysed yet 29 May 2019
CVE-2019-4178 CVE record

CVSS 6.4 Medium

IBM Cognos Analytics 11 could allow a remote attacker to traverse directories on the system.
- IBM Cognos Analytics
Not analysed yet 15 Apr 2019
CVE-2018-1842 CVE record

CVSS 3.6 Low

IBM Cognos Analytics: IBM Cognos Analytics 11 Configuration tool, under certain circumstances…
- IBM Cognos Analytics
Not analysed yet 9 Nov 2018
CVE-2018-1413 CVE record

IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting.
- IBM Cognos Analytics
Not analysed yet 7 May 2018
CVE-2016-9711 CVE record

CVSS 5.3 Medium

IBM Cognos Analytics: IBM Predictive Solutions Foundation (IBM Cognos Analytics 11.0) reveals sensitive…
- IBM Cognos Analytics
Not analysed yet 22 Mar 2018
CVE-2017-1784 CVE record

IBM Cognos Analytics: IBM Cognos Analytics 11.0 could produce results in temporary files that contain highly…
- IBM Cognos Analytics
Not analysed yet 29 Jan 2018
CVE-2017-1783 CVE record

IBM Cognos Analytics: IBM Cognos Analytics 11.0 could allow a local user to change parameters set from the…
- IBM Cognos Analytics
Not analysed yet 29 Jan 2018
CVE-2017-1779 CVE record

IBM Cognos Analytics: IBM Cognos Analytics 11.0 could store cached credentials locally that could be obtained…
- IBM Cognos Analytics
Not analysed yet 29 Jan 2018
CVE-2017-1535 CVE record

IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting.
- IBM Cognos Analytics
Not analysed yet 29 Aug 2017
CVE-2017-1485 CVE record

IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting.
- IBM Cognos Analytics
Not analysed yet 29 Aug 2017
CVE-2017-1428 CVE record

IBM Cognos Analytics 11.0 could allow a remote attacker to hijack the clicking action of the victim.
- IBM Cognos Analytics
Not analysed yet 29 Aug 2017
CVE-2017-1427 CVE record

IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting.
- IBM Cognos Analytics
Not analysed yet 29 Aug 2017