Description
IBM Cognos Analytics 11.2.0 through 11.2.4 FP4 and
12.0.0 through 12.0.4
is vulnerable to an Expression Language (EL) Injection vulnerability. A remote attacker could exploit this vulnerability to expose sensitive information, consume memory resources, and/or cause the server to crash when using a specially crafted EL statement.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | Cognos Analytics | 11.2.0 – ≤ 11.2.4, 12.0.0 – ≤ 12.0.4 | — |
Advisories 2
- WID-SEC-2025-0924 IBM Cognos Analytics: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 1, 2025
- NCSC-2024-0497 Kwetsbaarheden verholpen in IBM Cognos Analytics NCSC-NL (Netherlands) · Dec 23, 2024