Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:cognos_analytics:11.1.7:*:*:*:*:*:*:*

part: a version: 11.1.7 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductCognos Analytics (6f78cdba-5fe6-54a2-80bf-e78547d87db8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-29745 vulnerable 2026-06-08 05:31:26.913839 Details available
MEDIUM (5.4)
IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to priviledge escalation where a lower evel user could have access to the 'New Job' page to which they should not have access to. IBM X-Force ID: 201695.
Published: 2021-10-15T15:55:20.522Z
Updated: 2024-09-16T16:58:01.641Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29679 vulnerable 2026-06-08 05:31:26.784256 Details available
HIGH (8.8)
IBM Cognos Analytics 11.1.7 and 11.2.0 could allow an authenticated user to execute code remotely due to incorrectly neutralizaing user-contrlled input that could be interpreted a a server-side include (SSI) directive. IBM X-Force ID: 199915.
Published: 2021-10-15T15:55:18.978Z
Updated: 2024-09-17T01:21:01.928Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4951 vulnerable 2026-06-08 05:26:41.229240 Details available
MEDIUM (4)
IBM Cognos Analytics 11.1.7 and 11.2.0 contains locally cached browser data, that could allow a local attacker to obtain sensitive information.
Published: 2021-10-15T15:55:17.303Z
Updated: 2024-09-16T18:34:01.248Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.