GCVE - cpe:2.3:a:ibm:cognos_express:9.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:cognos_express:9.0:*:*:*:*:*:*:*

part: a version: 9.0 update: *

Vendor	Ibm (`177c0602-9232-5933-8f2f-9d22f079d22d`)
Product	Cognos Express (`0ddc65dc-9c3b-5fdd-b590-137e08739aa3`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-5445`	vulnerable	2026-06-08 05:04:51.695202	Details available IBM Cognos Express 9.0 before IFIX 2, 9.5 before IFIX 2, 10.1 before IFIX 2, and 10.2.1 before FP1 allows local users to obtain sensitive cleartext information by leveraging knowledge of a static decryption key. Published: 2014-03-25T20:00:00.000Z Updated: 2024-08-06T17:15:20.046Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/87821 http://www-01.ibm.com/support/docview.wss?uid=swg21667626	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-5444`	vulnerable	2026-06-08 05:04:51.694829	Details available The server in IBM Cognos Express 9.0 before IFIX 2, 9.5 before IFIX 2, 10.1 before IFIX 2, and 10.2.1 before FP1 allows remote attackers to read encrypted credentials via unspecified vectors. Published: 2014-03-25T20:00:00.000Z Updated: 2024-08-06T17:15:20.199Z Open on db.gcve.eu Reference links http://www-01.ibm.com/support/docview.wss?uid=swg21667626 https://exchange.xforce.ibmcloud.com/vulnerabilities/87820	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-5443`	vulnerable	2026-06-08 05:04:51.692449	Details available Cross-site request forgery (CSRF) vulnerability in IBM Cognos Express 9.0 before IFIX 2, 9.5 before IFIX 2, 10.1 before IFIX 2, and 10.2.1 before FP1 allows remote attackers to hijack the authentication of arbitrary users. Published: 2014-03-25T20:00:00.000Z Updated: 2024-08-06T17:15:20.113Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/87819 http://www-01.ibm.com/support/docview.wss?uid=swg21667626	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-0557`	vulnerable	2026-06-08 04:52:03.197595	Details available IBM Cognos Express 9.0 allows attackers to obtain unspecified access to the Tomcat Manager component, and cause a denial of service, by leveraging hardcoded credentials. Published: 2010-02-05T22:13:00.000Z Updated: 2024-09-17T03:18:18.886Z Open on db.gcve.eu Reference links http://www.osvdb.org/62118 http://www-01.ibm.com/support/docview.wss?uid=swg21419179 http://www.vupen.com/english/advisories/2010/0297 http://secunia.com/advisories/38457 http://www.securityfocus.com/bid/38084	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.