IBM Cognos Analytics 11.1.7
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:cognos_analytics:11.1.7:-:*:*:*:*:*:*
part: a version: 11.1.7 update: -
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Cognos Analytics (6f78cdba-5fe6-54a2-80bf-e78547d87db8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-43051 |
vulnerable | 2026-06-08 06:11:09.834928 |
IBM Cognos Analytics cross-site scripting
MEDIUM (5.4)
IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 267451.
Published: 2024-02-24T15:40:44.399Z
Updated: 2025-02-13T17:13:13.695Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38359 |
vulnerable | 2026-06-08 06:08:17.650883 |
IBM Cognos Analytics cross-site scripting
MEDIUM (6.1)
IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 260744.
Published: 2024-02-24T15:27:07.898Z
Updated: 2025-02-13T17:01:50.366Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-35011 |
vulnerable | 2026-06-08 06:06:26.379375 |
IBM Cognos Analytics server-side request forgey
MEDIUM (5.4)
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 257705.
Published: 2023-08-16T22:46:33.755Z
Updated: 2025-02-13T16:55:45.100Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-35009 |
vulnerable | 2026-06-08 06:06:26.369365 |
IBM Cognos Analytics information disclosure
MEDIUM (5.3)
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could allow a remote attacker to obtain system information without authentication which could be used in reconnaissance to gather information that could be used for future attacks. IBM X-Force ID: 257703.
Published: 2023-08-16T22:44:27.127Z
Updated: 2025-02-13T16:55:44.503Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-32344 |
vulnerable | 2026-06-08 06:04:45.584620 |
IBM Cognos Analytics cross-site request forgery
MEDIUM (4.3)
IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 is vulnerable to form action hijacking where it is possible to modify the form action to reference an arbitrary path. IBM X-Force ID: 255898.
Published: 2024-02-24T15:29:33.526Z
Updated: 2025-02-13T16:50:33.589Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-30996 |
vulnerable | 2026-06-08 06:04:41.608963 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-28530 |
vulnerable | 2026-06-08 06:01:11.051834 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25929 |
vulnerable | 2026-06-08 05:56:10.785791 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43887 |
vulnerable | 2026-06-08 05:49:34.942102 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-39160 |
vulnerable | 2026-06-08 05:47:18.248050 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-36773 |
vulnerable | 2026-06-08 05:46:07.731470 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-34357 |
vulnerable | 2026-06-08 05:44:52.687485 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-34339 |
vulnerable | 2026-06-08 05:44:52.634501 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-30614 |
vulnerable | 2026-06-08 05:43:38.668090 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-39047 |
vulnerable | 2026-06-08 05:33:48.820942 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-39045 |
vulnerable | 2026-06-08 05:33:48.814679 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-39009 |
vulnerable | 2026-06-08 05:33:48.751400 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-38946 |
vulnerable | 2026-06-08 05:33:48.616214 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-38945 |
vulnerable | 2026-06-08 05:33:48.613704 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-38909 |
vulnerable | 2026-06-08 05:33:48.531200 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-38905 |
vulnerable | 2026-06-08 05:33:48.530610 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-38904 |
vulnerable | 2026-06-08 05:33:48.530140 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-38903 |
vulnerable | 2026-06-08 05:33:48.529448 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-38886 |
vulnerable | 2026-06-08 05:33:48.497850 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-29867 |
vulnerable | 2026-06-08 05:31:27.149167 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-29824 |
vulnerable | 2026-06-08 05:31:27.054005 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-29823 |
vulnerable | 2026-06-08 05:31:27.053231 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-29768 |
vulnerable | 2026-06-08 05:31:26.985595 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-29756 |
vulnerable | 2026-06-08 05:31:26.959844 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-29719 |
vulnerable | 2026-06-08 05:31:26.867675 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-29716 |
vulnerable | 2026-06-08 05:31:26.864400 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20493 |
vulnerable | 2026-06-08 05:29:09.330727 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20470 |
vulnerable | 2026-06-08 05:29:09.292487 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20468 |
vulnerable | 2026-06-08 05:29:09.289511 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20464 |
vulnerable | 2026-06-08 05:29:09.286502 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20461 |
vulnerable | 2026-06-08 05:29:09.284953 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4301 |
vulnerable | 2026-06-08 05:25:59.119819 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.