Ibm

Cognos Analytics

110 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2019-4334

  • EPSS 0.92%
  • Veröffentlicht 09.11.2019 02:15:10
  • Zuletzt bearbeitet 21.11.2024 04:43:29

IBM Cognos Analytics 11.0 and 11.1 could reveal sensitive information to an authenticated user that could be used in future attacks against the system. IBM X-Force ID: 161271.

7.8

CVE-2019-4183

  • EPSS 3.52%
  • Veröffentlicht 17.09.2019 19:15:11
  • Zuletzt bearbeitet 21.11.2024 04:43:17

IBM Cognos Analytics 11.0, and 11.1 is vulnerable to a denial of service attack that could allow a remote user to send specially crafted requests that would consume all available CPU and memory resources. IBM X-Force ID: 158973.

5.4

CVE-2019-4342

  • EPSS 0.99%
  • Veröffentlicht 17.09.2019 19:15:11
  • Zuletzt bearbeitet 21.11.2024 04:43:29

IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...

5.4

CVE-2019-4139

  • EPSS 1%
  • Veröffentlicht 29.05.2019 15:29:00
  • Zuletzt bearbeitet 21.11.2024 04:43:13

IBM Cognos Analytics 11.0, 11.1.0, and 11.1.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosu...

9.1

CVE-2019-4178

  • EPSS 3.07%
  • Veröffentlicht 15.04.2019 15:29:00
  • Zuletzt bearbeitet 21.11.2024 04:43:17

IBM Cognos Analytics 11 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request to write or view arbitrary files on the system. IBM X-Force ID: 158919.

3.6

CVE-2018-1842

  • EPSS 0.26%
  • Veröffentlicht 09.11.2018 01:29:00
  • Zuletzt bearbeitet 21.11.2024 04:00:29

IBM Cognos Analytics 11 Configuration tool, under certain circumstances, will bypass OIDC namespace signature verification on its id_token. IBM X-Force ID: 150902.

5.4

CVE-2018-1413

  • EPSS 1.11%
  • Veröffentlicht 07.05.2018 13:29:00
  • Zuletzt bearbeitet 21.11.2024 03:59:46

IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted ...

5.3

CVE-2016-9711

  • EPSS 1.7%
  • Veröffentlicht 22.03.2018 12:29:00
  • Zuletzt bearbeitet 21.11.2024 03:01:38

IBM Predictive Solutions Foundation (IBM Cognos Analytics 11.0) reveals sensitive information in detailed error messages that could aid an attacker in further attacks against the system. IBM X-Force ID: 119619.

7.8

CVE-2017-1779

  • EPSS 0.41%
  • Veröffentlicht 29.01.2018 16:29:00
  • Zuletzt bearbeitet 21.11.2024 03:22:21

IBM Cognos Analytics 11.0 could store cached credentials locally that could be obtained by a local user. IBM X-Force ID: 136824.

4

CVE-2017-1783

  • EPSS 0.46%
  • Veröffentlicht 29.01.2018 16:29:00
  • Zuletzt bearbeitet 21.11.2024 03:22:21

IBM Cognos Analytics 11.0 could allow a local user to change parameters set from the Cognos Analytics menus without proper authentication. IBM X-Force ID: 136857.