IBM Cognos Analytics 11.1.7 Interim Fix 4
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:cognos_analytics:11.1.7:interimfix4:*:*:*:*:*:*
part: a version: 11.1.7 update: interimfix4
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Cognos Analytics (6f78cdba-5fe6-54a2-80bf-e78547d87db8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-35011 |
vulnerable | 2026-06-08 06:06:26.379555 |
IBM Cognos Analytics server-side request forgey
MEDIUM (5.4)
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 257705.
Published: 2023-08-16T22:46:33.755Z
Updated: 2025-02-13T16:55:45.100Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-35009 |
vulnerable | 2026-06-08 06:06:26.374290 |
IBM Cognos Analytics information disclosure
MEDIUM (5.3)
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could allow a remote attacker to obtain system information without authentication which could be used in reconnaissance to gather information that could be used for future attacks. IBM X-Force ID: 257703.
Published: 2023-08-16T22:44:27.127Z
Updated: 2025-02-13T16:55:44.503Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.