IBM Cognos Analytics 11.1.7 Fix Pack 4
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:cognos_analytics:11.1.7:fixpack4:*:*:*:*:*:*
part: a version: 11.1.7 update: fixpack4
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Cognos Analytics (6f78cdba-5fe6-54a2-80bf-e78547d87db8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-43051 |
vulnerable | 2026-06-08 06:11:09.838219 |
IBM Cognos Analytics cross-site scripting
MEDIUM (5.4)
IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 267451.
Published: 2024-02-24T15:40:44.399Z
Updated: 2025-02-13T17:13:13.695Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38359 |
vulnerable | 2026-06-08 06:08:17.653796 |
IBM Cognos Analytics cross-site scripting
MEDIUM (6.1)
IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 260744.
Published: 2024-02-24T15:27:07.898Z
Updated: 2025-02-13T17:01:50.366Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-32344 |
vulnerable | 2026-06-08 06:04:45.584831 |
IBM Cognos Analytics cross-site request forgery
MEDIUM (4.3)
IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 is vulnerable to form action hijacking where it is possible to modify the form action to reference an arbitrary path. IBM X-Force ID: 255898.
Published: 2024-02-24T15:29:33.526Z
Updated: 2025-02-13T16:50:33.589Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-30996 |
vulnerable | 2026-06-08 06:04:41.616461 |
IBM Cognos Analytics cross-origin resource sharing
MEDIUM (5.3)
IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 could be vulnerable to information leakage due to unverified sources in messages sent between Windows objects of different origins. IBM X-Force ID: 254290.
Published: 2024-02-24T15:35:48.371Z
Updated: 2025-02-13T16:49:41.260Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-28530 |
vulnerable | 2026-06-08 06:01:11.055696 |
IBM Cognos Analytics cross-site scripting
MEDIUM (5.4)
IBM Cognos Analytics 11.1 and 11.2 is vulnerable to stored cross-site scripting, caused by improper validation of SVG Files in Custom Visualizations. A remote attacker could exploit this vulnerability to execute scripts in a victim's Web browser within the security context of the hosting Web site. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials. IBM X-Force ID: 251214.
Published: 2023-07-22T01:47:06.552Z
Updated: 2025-02-13T16:48:45.655Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25929 |
vulnerable | 2026-06-08 05:56:10.788555 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43887 |
vulnerable | 2026-06-08 05:49:34.942499 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43883 |
vulnerable | 2026-06-08 05:49:34.939792 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-39160 |
vulnerable | 2026-06-08 05:47:18.248312 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38708 |
vulnerable | 2026-06-08 05:47:16.915941 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-36773 |
vulnerable | 2026-06-08 05:46:07.733825 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-34357 |
vulnerable | 2026-06-08 05:44:52.687557 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-34339 |
vulnerable | 2026-06-08 05:44:52.637193 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-30614 |
vulnerable | 2026-06-08 05:43:38.671364 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-39047 |
vulnerable | 2026-06-08 05:33:48.821138 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-39045 |
vulnerable | 2026-06-08 05:33:48.814900 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-39009 |
vulnerable | 2026-06-08 05:33:48.751576 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-38945 |
vulnerable | 2026-06-08 05:33:48.615551 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-29823 |
vulnerable | 2026-06-08 05:31:27.053409 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-29768 |
vulnerable | 2026-06-08 05:31:26.987058 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20468 |
vulnerable | 2026-06-08 05:29:09.291947 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4301 |
vulnerable | 2026-06-08 05:25:59.147327 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.