IBM Cognos Analytics 11.1.7 Fix Pack 7
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:cognos_analytics:11.1.7:fixpack7:*:*:*:*:*:*
part: a version: 11.1.7 update: fixpack7
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Cognos Analytics (6f78cdba-5fe6-54a2-80bf-e78547d87db8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-43051 |
vulnerable | 2026-06-08 06:11:09.840658 |
IBM Cognos Analytics cross-site scripting
MEDIUM (5.4)
IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 267451.
Published: 2024-02-24T15:40:44.399Z
Updated: 2025-02-13T17:13:13.695Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38359 |
vulnerable | 2026-06-08 06:08:17.656092 |
IBM Cognos Analytics cross-site scripting
MEDIUM (6.1)
IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 260744.
Published: 2024-02-24T15:27:07.898Z
Updated: 2025-02-13T17:01:50.366Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-32344 |
vulnerable | 2026-06-08 06:04:45.584890 |
IBM Cognos Analytics cross-site request forgery
MEDIUM (4.3)
IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 is vulnerable to form action hijacking where it is possible to modify the form action to reference an arbitrary path. IBM X-Force ID: 255898.
Published: 2024-02-24T15:29:33.526Z
Updated: 2025-02-13T16:50:33.589Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-30996 |
vulnerable | 2026-06-08 06:04:41.618401 |
IBM Cognos Analytics cross-origin resource sharing
MEDIUM (5.3)
IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 could be vulnerable to information leakage due to unverified sources in messages sent between Windows objects of different origins. IBM X-Force ID: 254290.
Published: 2024-02-24T15:35:48.371Z
Updated: 2025-02-13T16:49:41.260Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-34357 |
vulnerable | 2026-06-08 05:44:52.690926 |
IBM Cognos Analytics Mobile Server denial of service
MEDIUM (6.5)
IBM Cognos Analytics Mobile Server 11.1.7, 11.2.4, and 12.0.0 is vulnerable to Denial of Service due to due to weak or absence of rate limiting. By making unlimited http requests, it is possible for a single user to exhaust server resources over a period of time making service unavailable for other legitimate users. IBM X-Force ID: 230510.
Published: 2024-02-24T15:38:49.771Z
Updated: 2025-02-13T16:32:46.399Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.