Skip to content
OpenAdvisories
High WID-SEC-2025-0924 2 CVEs

IBM Cognos Analytics: Mehrere Schwachstellen

Published May 1, 2025 · Updated May 1, 2025 · de-DE

Vendor: IBM Product: Cognos Analytics Platform: Linux Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in IBM Cognos Analytics ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, oder einen Denial-of-Service auszulösen.

Product

IBM Cognos Analytics ist eine Business-Intelligence-Lösung, z. B. für Reporting-Zwecke.

Vulnerabilities 2

  • Critical 9.0
    CVE-2024-51466

    IBM Cognos Analytics expression language injection

    IBM Cognos Analytics 11.2.0 through 11.2.4 FP4 and 12.0.0 through 12.0.4 is vulnerable to an Expression Language (EL) Injection vulnerability. A remote attacker could exploit this vulnerability to expose sensitive information, consume memory resources, and/or…

    IBM Cognos Analytics
  • High 8.0
    CVE-2024-40695

    IBM Cognos Analytics file upload

    IBM Cognos Analytics 11.2.0 through 11.2.4 FP4 and 12.0.0 through 12.0.4 could be vulnerable to malicious file upload by not validating the content of the file uploaded to the web interface. Attackers can make use of this weakness and upload malicious executa…

    IBM Cognos Analytics

Revision history

  1. #1

    Initiale Fassung

References