IBM Cognos Analytics 11.0.13 Fix Pack 2
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:cognos_analytics:11.0.13:fixpack2:*:*:*:*:*:*
part: a version: 11.0.13 update: fixpack2
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Cognos Analytics (6f78cdba-5fe6-54a2-80bf-e78547d87db8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-20461 |
vulnerable | 2026-06-08 05:29:09.283454 |
Details available
MEDIUM (4.3)
IBM Cognos Analytics 10.0 and 11.1 is susceptible to a weakness in the implementation of the System Appearance configuration setting. An attacker could potentially bypass business logic to modify the appearance and behavior of the application. IBM X-Force ID: 196770.
Published: 2021-06-30T13:25:12.039Z
Updated: 2024-09-16T22:30:55.251Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4388 |
vulnerable | 2026-06-08 05:25:59.254921 |
Details available
MEDIUM (6.5)
IBM Cognos Analytics 11.0 and 11.1 could be vulnerable to a denial of service attack by failing to catch exceptions in a servlet also exposing debug information could also be used in future attacks. IBM X-Force ID: 179270.
Published: 2020-10-12T13:20:29.066Z
Updated: 2024-09-17T00:06:21.476Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4302 |
vulnerable | 2026-06-08 05:25:59.150307 |
Details available
MEDIUM (5.5)
IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to execute arbitrary code on the system, caused by a CSV injection. By persuading a victim to open a specially-crafted excel file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 176610.
Published: 2020-10-12T13:20:28.623Z
Updated: 2024-09-17T01:51:19.069Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-4555 |
vulnerable | 2026-06-08 05:13:57.294672 |
Details available
MEDIUM (5.4)
IBM Cognos Analytics 11.0 and 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 166204.
Published: 2019-12-20T16:25:25.449Z
Updated: 2024-09-16T23:30:25.185Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-4231 |
vulnerable | 2026-06-08 05:13:56.974282 |
Details available
MEDIUM (4.3)
IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 159356.
Published: 2019-12-20T16:25:25.056Z
Updated: 2024-09-17T04:24:14.175Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.