Medium · 5.3 CVE-2023-30996 EUVD-2023-35334GHSA-mj54-2qgh-27pf

IBM Cognos Analytics cross-origin resource sharing

Published Feb 24, 2024 · Updated Feb 13, 2025 · Assigned by ibm

Description

IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 could be vulnerable to information leakage due to unverified sources in messages sent between Windows objects of different origins. IBM X-Force ID: 254290.

Affected products

Vendor	Product	Affected	Fixed
IBM	Cognos Analytics	11.1.7, 11.2.4, 12.0.0	—

References

https://www.ibm.com/support/pages/node/7123154 vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/254290 vdb-entry
https://security.netapp.com/advisory/ntap-20240405-0004/
https://security.netapp.com/advisory/ntap-20240621-0006/