Skip to content
OpenAdvisories

Product · IBM

Cognos Analytics

105 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • High 7.5
    CVE-2025-25032

    IBM Cognos Analytics denial of service

    IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, 12.0.2, 12.0.3, and 12.0.4 could allow an authenticated user to cause a denial of service by sending a specially crafted request that would exhaust memory resources.

    IBM Cognos Analytics
  • High 7.1
    CVE-2024-49352

    IBM Cognos Anaytics XML external entity injection

    IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, 12.0.2, 12.0.3, and 12.0.4 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensi…

    IBM Cognos Analytics
  • High 8.0
    CVE-2024-40695

    IBM Cognos Analytics file upload

    IBM Cognos Analytics 11.2.0 through 11.2.4 FP4 and 12.0.0 through 12.0.4 could be vulnerable to malicious file upload by not validating the content of the file uploaded to the web interface. Attackers can make use of this weakness and upload malicious executa…

    IBM Cognos Analytics
  • High 8.6
    CVE-2024-25047

    IBM Cognos Analytics log injection

    IBM Cognos Analytics 11.2.0 through 11.2.4 and 12.0.0 through 12.0.2 is vulnerable to injection attacks in application logging by not sanitizing user provided data. This could lead to further attacks against the system. IBM X-Force ID: 282956.

    IBM Cognos Analytics
  • High 7.1
    CVE-2022-36773

    IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to an XML External Entity Injection (XXE) attack when pro…

    IBM Cognos Analytics
  • High 8.8
    CVE-2021-29679

    IBM Cognos Analytics 11.1.7 and 11.2.0 could allow an authenticated user to execute code remotely due to incorrectly ne…

    IBM Cognos Analytics
  • High 7.1
    CVE-2020-4520

    IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to inject malicious HTML code that when viewed by the …

    IBM Cognos Analytics
  • High 8.2
    CVE-2020-4300

    IBM Cognos Analytics 11.0 and 11.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML d…

    IBM Cognos Analytics
  • High 7.1
    CVE-2019-4730

    IBM Cognos Analytics 11.0 and 11.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML d…

    IBM Cognos Analytics
  • High 8.2
    CVE-2020-4377

    IBM Cognos Anaytics 11.0 and 11.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML da…

    IBM Cognos Analytics
  • High 8.3
    CVE-2018-1721

    IBM Cognos Analytics 11.0 and 11.1 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML da…

    IBM Cognos Analytics