Skip to content
OpenAdvisories
Medium · 5.4 CVE-2023-35011 EUVD-2023-39048GHSA-fchh-435h-cf8h

IBM Cognos Analytics server-side request forgey

Published Aug 16, 2023 · Updated Feb 13, 2025 · Assigned by ibm

Description

IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 257705.

Affected products

VendorProductAffectedFixed
IBM Cognos Analytics 11.1.7, 11.2.0, 11.2.1 —

References