VendorsIBMcognos_analytics11.2.4
Vulnerabilities

IBM Cognos Analytics 11.2.4

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

24CVEs
CVE-2024-51466
IBM Cognos Analytics expression language injection
Published 2024-12-20 · Analyzed
9.0EPSS 0.006
CVE-2024-25047
IBM Cognos Analytics log injection
Published 2024-05-02 · Analyzed
8.6EPSS 0.006
CVE-2025-3633
IBM Cognos Analytics is affected by multiple security vulnerabilities
Published 2026-05-27 · Analyzed
8.2EPSS 0.003
CVE-2024-40695
IBM Cognos Analytics file upload
Published 2024-12-20 · Analyzed
8.0EPSS 0.004
CVE-2025-36126
IBM Cognos Analytics is affected by Cross-site scripting.
Published 2026-05-26 · Analyzed
7.6EPSS 0.002
CVE-2025-25032
IBM Cognos Analytics denial of service
Published 2025-06-11 · Analyzed
7.5EPSS 0.004
CVE-2024-49352
IBM Cognos Anaytics XML external entity injection
Published 2025-02-05 · Analyzed
7.1EPSS 0.005
CVE-2022-34357
IBM Cognos Analytics Mobile Server denial of service
Published 2024-02-24 · Analyzed
6.5EPSS 0.012
CVE-2024-56340
IBM Cognos Analytics path traversal
Published 2025-02-28 · Modified
6.5EPSS 0.008
CVE-2025-0823
IBM MQ path traversal
Published 2025-02-28 · Analyzed
6.5EPSS 0.006
CVE-2024-52900
IBM Cognos Analytics cross-site scripting
Published 2025-06-28 · Analyzed
6.4EPSS 0.002
CVE-2023-38359
IBM Cognos Analytics cross-site scripting
Published 2024-02-24 · Analyzed
6.1EPSS 0.007
CVE-2024-25053
IBM Cognos Analytics improper certificate validation
Published 2024-06-28 · Modified
5.9EPSS 0.003
CVE-2025-0917
IBM Cognos Analytics cross-site scripting
Published 2025-06-11 · Analyzed
5.5EPSS 0.002
CVE-2024-40703
IBM Cognos Analytics information disclosure
Published 2024-09-22 · Analyzed
5.5EPSS 0.001
CVE-2023-28530
IBM Cognos Analytics cross-site scripting
Published 2023-07-22 · Modified
5.4EPSS 0.007
CVE-2023-43051
IBM Cognos Analytics cross-site scripting
Published 2024-02-24 · Analyzed
5.4EPSS 0.006
CVE-2023-25929
IBM Cognos Analytics cross-site scripting
Published 2023-07-22 · Modified
5.4EPSS 0.005
CVE-2023-35011
IBM Cognos Analytics server-side request forgey
Published 2023-08-16 · Modified
5.4EPSS 0.005
CVE-2024-25041
IBM Cognos Analytics cross-site scripting
Published 2024-06-28 · Modified
5.4EPSS 0.004
CVE-2023-35009
IBM Cognos Analytics information disclosure
Published 2023-08-16 · Modified
5.3EPSS 0.010
CVE-2023-30996
IBM Cognos Analytics cross-origin resource sharing
Published 2024-02-24 · Analyzed
5.3EPSS 0.004
CVE-2025-0923
IBM Cognos Analytics information disclosure
Published 2025-06-11 · Analyzed
5.3EPSS 0.003
CVE-2023-32344
IBM Cognos Analytics cross-site request forgery
Published 2024-02-24 · Analyzed
4.3EPSS 0.004