Skip to content
OpenAdvisories
Medium · 4.3 CVE-2025-36076 EUVD-2025-210957GHSA-qv83-qj3c-qc9v

IBM Cognos Analytics versions 12.0.4 and 12.1.3 is affected by security vulnerabilities

Published Sep 18, 2026 · Updated Sep 18, 2026 · Assigned by ibm

Vendor: IBM Product: Cognos Analytics

Description

IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 stores sensitive information in source code could be used by an authenticated user in further attacks against the system.

Affected products

VendorProductAffectedFixed
IBM Cognos Analytics 12.1.0 – ≤ 12.1.3 FP1, 12.0.4 – ≤ 12.0.4 FP2 —

References