Medium · 6.5 CVE-2024-56340 EUVD-2024-53951GHSA-j4w4-g97j-m5q9

IBM Cognos Analytics path traversal

Published Feb 28, 2025 · Updated Oct 17, 2025 · Assigned by ibm

Description

IBM Cognos Analytics 11.2.0 through 11.2.4 FP5 is vulnerable to local file inclusion vulnerability, allowing an attacker to access sensitive files by inserting path traversal payloads inside the deficon parameter.

Affected products

Vendor	Product	Affected	Fixed
IBM	Cognos Analytics	11.2.0 – ≤ 11.2.4 FP5	—

References

https://www.ibm.com/support/pages/node/7183676 vendor-advisory