CVE-2019-4334
At a glance Severity MEDIUM 4.3 EPSS EPSS 0.92 % · percentile 60 (2026-10-27) State PUBLISHED Published 2019-11-09 Updated 2024-09-16 Assigner ibm NVD status Modified
Description IBM Cognos Analytics 11.0 and 11.1 could reveal sensitive information to an authenticated user that could be used in future attacks against the system. IBM X-Force ID: 161271.
Scores Version Score Vector Scored by CVSS 3.0 MEDIUM 4.3 CVSS:3.0/C:L/A:N/S:U/AC:L/AV:N/PR:L/UI:N/I:N/E:U/RL:O/RC:C ibm CVSS 3.1 MEDIUM 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N NVD · nvd@nist.gov (Primary) CVSS 3.0 MEDIUM 4.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N NVD · psirt@us.ibm.com (Secondary) CVSS 2.0 MEDIUM 4.0 AV:N/AC:L/Au:S/C:P/I:N/A:N NVD · nvd@nist.gov (Primary)
European references
Affected configurations (NVD CPE) cpe:2.3:a:ibm:cognos_analytics:11.0.0:*:*:*:*:*:*:*cpe:2.3:a:ibm:cognos_analytics:11.1.0:*:*:*:*:*:*:*
Affected products
References
Sources