IBM Cognos Analytics
102 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-36076 | 12.1.0 – 12.1.3 FP1 ; 12.0.4 – 12.0.4 FP2 | IBM Cognos Analytics versions 12.0.4 and 12.1.3 is affected by security vulnerabilities | MEDIUM 4.3 | 0.3 % | ||
| CVE-2025-33147 | 12.1.0 – 12.1.3 FP1 ; 12.0.4 – 12.0.4 FP2 | IBM Cognos Analytics versions 12.0.4 and 12.1.3 is affected by security vulnerabilities | MEDIUM 5.9 | 0.2 % | ||
| CVE-2024-56344 | 12.0.4 – 12.0.4 FP2 ; 12.1.0 – 12.1.3 FP1 | IBM Cognos Analytics 12.0.4 and 12.1.3 versions are affected by security vulnerabilities | MEDIUM 5.9 | 0.3 % | ||
| CVE-2026-7884 | 12.1.0 – 12.1.3 FP1 ; 12.0.4 – 12.0.4 FP2 | IBM Cognos Analytics versions 12.0.4 and 12.1.3 is affected by security vulnerabilities | MEDIUM 5.4 | 0.2 % | ||
| CVE-2026-15995 | 12.1.3 GA Version with build number – 12.1.3-2606251736 | IBM Cognos Analytics 12.1.3 general availability package contains a data integrity issue in the Agentic AI assistant that may cause incor… | MEDIUM 5.4 | 0.2 % | ||
| CVE-2025-3633 | 11.2.0 ; 12.0 ; 12.1.0 | IBM Cognos Analytics is affected by multiple security vulnerabilities | HIGH 8.2 | 0.3 % | ||
| CVE-2025-36126 | 11.2.0 ; 12.0 ; 12.1.0 | IBM Cognos Analytics is affected by Cross-site scripting. | HIGH 7.6 | 0.2 % | ||
| CVE-2024-52900 | 11.2.0 – 11.2.4 FP5 ; 12.0.0 – 12.0.4 | IBM Cognos Analytics cross-site scripting | MEDIUM 6.4 | 0.2 % | ||
| CVE-2025-0923 | 11.2.0 ; 11.2.1 ; 11.2.2 ; … | IBM Cognos Analytics information disclosure | MEDIUM 5.3 | 0.3 % | ||
| CVE-2025-0917 | 11.2.0 ; 11.2.1 ; 11.2.2 ; … | IBM Cognos Analytics cross-site scripting | MEDIUM 5.5 | 0.2 % | ||
| CVE-2025-25032 | 11.2.0 ; 11.2.1 ; 11.2.2 ; … | IBM Cognos Analytics denial of service | HIGH 7.5 | 0.4 % | ||
| CVE-2024-56340 | 11.2.0 – 11.2.4 FP5 | IBM Cognos Analytics path traversal | MEDIUM 6.5 | 0.8 % | ||
| CVE-2025-0823 | 11.2.0 – 11.2.4 FP5 ; 12.0.0 – 12.0.4 | IBM MQ path traversal | MEDIUM 6.5 | 0.6 % | ||
| CVE-2024-49352 | 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, 12.0.2, 12.0.3, 12.0.4 | IBM Cognos Anaytics XML external entity injection | HIGH 7.1 | 0.5 % | ||
| CVE-2024-40695 | 11.2.0 – 11.2.4 ; 12.0.0 – 12.0.4 | IBM Cognos Analytics file upload | HIGH 8.0 | 0.4 % | ||
| CVE-2024-51466 | 11.2.0 – 11.2.4 ; 12.0.0 – 12.0.4 | IBM Cognos Analytics expression language injection | CRITICAL 9.0 | 0.7 % | ||
| CVE-2024-25042 | 11.2.0 – 11.2.4 ; 12.0.0 – 12.0.3 | IBM Cognos Analytics cross-site scripting | MEDIUM 6.1 | 0.3 % | ||
| CVE-2024-45082 | 11.2.0 – 11.2.4 ; 12.0.0 – 12.0.3 | IBM Cognos Analytics HTTP open redirection | MEDIUM 6.8 | 0.2 % | ||
| CVE-2024-41752 | 11.2.0 – 11.2.4 ; 12.0.0 – 12.0.3 | IBM Cognos Analytics HTML injection | MEDIUM 6.1 | 0.3 % | ||
| CVE-2024-40703 | 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, 12.0.2, 12.0.3 | IBM Cognos Analytics information disclosure | MEDIUM 5.5 | 0.1 % | ||
| CVE-2024-25041 | 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, 12.0.2 | IBM Cognos Analytics cross-site scripting | MEDIUM 5.4 | 0.4 % | ||
| CVE-2024-25053 | 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, 12.0.2 | IBM Cognos Analytics improper certificate validation | MEDIUM 5.9 | 0.3 % | ||
| CVE-2024-25047 | 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, 12.0.2 | IBM Cognos Analytics log injection | HIGH 8.6 | 0.6 % | ||
| CVE-2023-43051 | 11.1.7, 11.2.4, 12.0.0 | IBM Cognos Analytics cross-site scripting | MEDIUM 5.4 | 0.6 % | ||
| CVE-2022-34357 | 11.1.7, 11.2.4, 12.0.0 | IBM Cognos Analytics Mobile Server denial of service | MEDIUM 6.5 | 1.2 % | ||
| CVE-2023-30996 | 11.1.7, 11.2.4, 12.0.0 | IBM Cognos Analytics cross-origin resource sharing | MEDIUM 5.3 | 0.4 % | ||
| CVE-2023-32344 | e | IBM Cognos Analytics cross-site request forgery | MEDIUM 4.3 | 0.4 % | ||
| CVE-2023-38359 | e | IBM Cognos Analytics cross-site scripting | MEDIUM 6.1 | 0.7 % | ||
| CVE-2023-35011 | 11.1.7, 11.2.0, 11.2.1 | IBM Cognos Analytics server-side request forgey | MEDIUM 5.4 | 0.5 % | ||
| CVE-2023-35009 | 11.1.7, 11.2.0, 11.2.1 | IBM Cognos Analytics information disclosure | MEDIUM 5.3 | 1.0 % | ||
| CVE-2023-28530 | 11.1, 11.2 | IBM Cognos Analytics cross-site scripting | MEDIUM 5.4 | 0.7 % | ||
| CVE-2023-25929 | 11.1, 11.2 | IBM Cognos Analytics cross-site scripting | MEDIUM 5.4 | 0.5 % | ||
| CVE-2021-39036 | 11.1, 11.2 | IBM Cognos Analytics cross-site scripting | MEDIUM 6.1 | 0.5 % | ||
| CVE-2022-39160 | 11.1.7, 11.2.0, 11.2.1 | IBM Cognos Analytics cross-site scripting | MEDIUM 6.1 | 0.4 % | ||
| CVE-2022-43883 | 11.1.7, 11.2.0, 11.2.1 | IBM Cognos Analytics data manipulation | HIGH 7.5 | 0.6 % | ||
| CVE-2022-43887 | 11.1.7, 11.2.0, 11.2.1 | IBM Cognos Analytics information disclosure | MEDIUM 5.3 | 0.6 % | ||
| CVE-2022-38708 | 11.1.7 11.2.0, 11.2.1 | IBM Cognos Analytics server-side request forgery | CRITICAL 9.1 | 0.5 % | ||
| CVE-2022-36773 | 11.2.0 ; 11.1.7 ; 11.2.1 | IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A r | HIGH 8.1 | 1.9 % | ||
| CVE-2022-30614 | 11.2.0 ; 11.1.7 ; 11.2.1 | IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to a denial of service via email flooding caused by sending a specially-crafte | HIGH 7.5 | 1.8 % | ||
| CVE-2021-39045 | 11.2.0 ; 11.1.7 ; 11.2.1 | IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could allow a local attacker to obtain information due to the autocomplete feature on passwo | MEDIUM 6.2 | 0.2 % | ||
| CVE-2021-39009 | 11.2.0 ; 11.1.7 ; 11.2.1 | IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 stores user credentials in plain clear text which can be read by a local privileged user. IB | MEDIUM 5.5 | 0.2 % | ||
| CVE-2021-29823 | 11.2.0 ; 11.1.7 ; 11.2.1 | IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicio | MEDIUM 6.5 | 0.5 % | ||
| CVE-2021-20468 | 11.2.0 ; 11.1.7 ; 11.2.1 | IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicio | MEDIUM 6.5 | 0.4 % | ||
| CVE-2020-4301 | 11.2.0 ; 11.1.7 ; 11.2.1 | IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicio | MEDIUM 6.5 | 0.4 % | ||
| CVE-2021-39047 | 11.2.0 ; 11.1.7 ; 11.2.1 | IBM Planning Analytics 2.0 and IBM Cognos Analytics 11.2.1, 11.2.0, and 11.1.7 are vulnerable to cross-site scripting. This vulnerability al | MEDIUM 6.1 | 0.9 % | ||
| CVE-2021-38945 | 11.2.0 ; 11.1.7 ; 11.2.1 | IBM Cognos Analytics 11.2.1, 11.2.0, and 11.1.7 could allow a remote attacker to upload arbitrary files, caused by improper content validati | CRITICAL 9.8 | 1.8 % | ||
| CVE-2021-29768 | 11.2.0 ; 11.1.7 ; 11.2.1 | IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could allow a low level user to obtain sensitive information from the details of the 'Cloud | MEDIUM 6.5 | 1.0 % | ||
| CVE-2021-38946 | 11.2.0 ; 11.1.7 ; 11.2.1 | IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Ja | MEDIUM 5.4 | 0.7 % | ||
| CVE-2021-38905 | 11.2.0 ; 11.1.7 ; 11.2.1 | IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 could allow an authenticated user to view report pages that they should not have access to. | MEDIUM 4.3 | 0.9 % | ||
| CVE-2021-38904 | 11.2.0 ; 11.1.7 ; 11.2.1 | IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 could allow a remote attacker to obtain credentials from a user's browser via incorrect auto | MEDIUM 6.5 | 1.8 % | ||
| CVE-2021-38903 | 11.2.0 ; 11.1.7 ; 11.2.1 | IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. | MEDIUM 5.4 | 1.0 % | ||
| CVE-2021-38886 | 11.2.0 ; 11.1.7 ; 11.2.1 | IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicio | HIGH 8.8 | 0.6 % | ||
| CVE-2021-29824 | 11.2.0 ; 11.1.7 ; 11.2.1 | IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to priviledge escalation where a lower level user could have read access to to | MEDIUM 4.3 | 0.9 % | ||
| CVE-2021-20464 | 11.2.0 ; 11.1.7 ; 11.2.1 | IBM Cognos Analytics PowerPlay (IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7) could be vulnerable to an XML Bomb attack by a malicious au | MEDIUM 6.5 | 1.4 % | ||
| CVE-2021-38909 | 11.2.0 ; 11.1.7 | IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript | MEDIUM 5.4 | 0.7 % | ||
| CVE-2021-29867 | 11.2.0 ; 11.1.7 | IBM Cognos Analytics 11.1.7 and 11.2.0 could allow an authenticated to view or edit a Jupyter notebook that they should not have access to. | MEDIUM 5.4 | 0.8 % | ||
| CVE-2021-29756 | 11.2.0 ; 11.1.7 | IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site request forgery (CSRF) in the My Inbox page which could allow an attacker | HIGH 8.8 | 0.6 % | ||
| CVE-2021-29719 | 11.2.0 ; 11.1.7 | IBM Cognos Analytics 11.1.7 and 11.2.0 could be vulnerable to client side vulnerabilties due to a web response specifying an incorrect conte | MEDIUM 5.3 | 1.2 % | ||
| CVE-2021-29716 | 11.2.0 ; 11.1.7 | IBM Cognos Analytics 11.1.7 and 11.2.0 could allow a low level user to reas of the application that privileged user should only be allowed t | MEDIUM 6.5 | 1.0 % | ||
| CVE-2021-20493 | 11.2.0 ; 11.1.7 | IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript | MEDIUM 6.1 | 0.9 % | ||
| CVE-2021-20470 | 11.2.0 ; 11.1.7 | IBM Cognos Analytics 11.1.7 and 11.2.0 does not require that users should have strong passwords by default, which makes it easier for attack | HIGH 7.5 | 1.4 % | ||
| CVE-2021-29745 | 11.2.0 ; 11.1.7 | IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to priviledge escalation where a lower evel user could have access to the 'New Job' pag | HIGH 8.8 | 1.0 % | ||
| CVE-2021-29679 | 11.2.0 ; 11.1.7 | IBM Cognos Analytics 11.1.7 and 11.2.0 could allow an authenticated user to execute code remotely due to incorrectly neutralizaing user-cont | HIGH 8.8 | 2.0 % | ||
| CVE-2020-4951 | 11.2.0 ; 11.1.7 | IBM Cognos Analytics 11.1.7 and 11.2.0 contains locally cached browser data, that could allow a local attacker to obtain sensitive informati | MEDIUM 4.0 | 0.3 % | ||
| CVE-2021-20461 | 11.0 ; 11.1 | IBM Cognos Analytics 10.0 and 11.1 is susceptible to a weakness in the implementation of the System Appearance configuration setting. An att | MEDIUM 6.5 | 1.0 % | ||
| CVE-2020-4561 | 11.0 ; 11.1 | IBM Cognos Analytics 11.0 and 11.1 DQM API allows submitting of all control requests in unauthenticated sessions. This allows a remote attac | CRITICAL 10.0 | 2.9 % | ||
| CVE-2020-4520 | 11.0 ; 11.1 | IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to inject malicious HTML code that when viewed by the authenticated victim | HIGH 8.8 | 2.7 % | ||
| CVE-2020-4354 | 11.0 ; 11.1 | IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code | MEDIUM 5.4 | 1.0 % | ||
| CVE-2020-4300 | 11.0 ; 11.1 | IBM Cognos Analytics 11.0 and 11.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacke | HIGH 8.2 | 4.0 % | ||
| CVE-2019-4730 | 11.0 ; 11.1 | IBM Cognos Analytics 11.0 and 11.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacke | HIGH 7.1 | 2.0 % | ||
| CVE-2019-4724 | 11.0 ; 11.1 | IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain credentials from a user's browser via incorrect autocomplete sett | HIGH 7.5 | 2.4 % | ||
| CVE-2019-4723 | 11.0 ; 11.1 | IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain credentials from a user's browser via incorrect autocomplete sett | HIGH 7.5 | 2.4 % | ||
| CVE-2019-4722 | 11.0 ; 11.1 | IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information via a stack trace due to mishandling of cer | MEDIUM 4.3 | 1.4 % | ||
| CVE-2019-4653 | 11.0 ; 11.1 | IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code | MEDIUM 5.4 | 0.8 % | ||
| CVE-2019-4471 | 11.0 ; 11.1 | IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information, caused by the failure to set the secure fl | MEDIUM 6.5 | 1.0 % | ||
| CVE-2020-4388 | 11.0 ; 11.1 | IBM Cognos Analytics 11.0 and 11.1 could be vulnerable to a denial of service attack by failing to catch exceptions in a servlet also exposi | HIGH 8.2 | 1.3 % | ||
| CVE-2020-4302 | 11.0 ; 11.1 | IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to execute arbitrary code on the system, caused by a CSV injection. By pers | HIGH 7.8 | 1.7 % | ||
| CVE-2020-4377 | 11.0 ; 11.1 | IBM Cognos Anaytics 11.0 and 11.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker | CRITICAL 9.1 | 2.1 % | ||
| CVE-2019-4589 | 11.0 ; 11.1 | IBM Cognos Analytics 11.0 and 11.1 is vulnerable to privlege escalation where the "My schedules and subscriptions" page is visible and acces | MEDIUM 4.6 | 0.7 % | ||
| CVE-2019-4366 | 11.0 ; 11.1 | IBM Cognos Analytics 11.0 and 11.1 is susceptible to an information disclosure vulnerability where an attacker could gain access to cached b | MEDIUM 5.3 | 0.7 % | ||
| CVE-2019-4729 | 11.0 ; 11.1 | IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is | MEDIUM 4.3 | 1.6 % | ||
| CVE-2019-4623 | 11.0 ; 11.1 | IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code | MEDIUM 5.4 | 0.7 % | ||
| CVE-2019-4343 | 11.0 ; 11.1 | IBM Cognos Analytics 11.0 and 11.1 allows overly permissive cross-origin resource sharing which could allow an attacker to transfer private | MEDIUM 6.5 | 1.5 % | ||
| CVE-2019-4555 | 11.0 ; 11.1 | IBM Cognos Analytics 11.0 and 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code | MEDIUM 5.4 | 0.8 % | ||
| CVE-2019-4231 | 11.0 ; 11.1 | IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauth | MEDIUM 4.3 | 0.7 % | ||
| CVE-2019-4645 | 11.0 ; 11.1 | IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code | MEDIUM 6.1 | 0.7 % | ||
| CVE-2019-4334 | 11.0 ; 11.1 | IBM Cognos Analytics 11.0 and 11.1 could reveal sensitive information to an authenticated user that could be used in future attacks against | MEDIUM 4.3 | 0.9 % | ||
| CVE-2018-1721 | 11.0 ; 11.1 | IBM Cognos Analytics 11.0 and 11.1 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker | HIGH 8.8 | 1.8 % | ||
| CVE-2019-4342 | 11.0 ; 11.1 | IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code | MEDIUM 5.4 | 1.0 % | ||
| CVE-2019-4183 | 11.0 ; 11.1 | IBM Cognos Analytics 11.0, and 11.1 is vulnerable to a denial of service attack that could allow a remote user to send specially crafted req | HIGH 7.5 | 3.5 % | ||
| CVE-2019-4139 | 11.0 ; 11.1.0 ; 11.1.1 | IBM Cognos Analytics 11.0, 11.1.0, and 11.1.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Java | MEDIUM 5.4 | 1.0 % | ||
| CVE-2019-4178 | 11 | IBM Cognos Analytics 11 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL | CRITICAL 9.1 | 3.1 % | ||
| CVE-2018-1842 | 11 | IBM Cognos Analytics 11 Configuration tool, under certain circumstances, will bypass OIDC namespace signature verification on its id_token. | LOW 3.6 | 0.3 % | ||
| CVE-2018-1413 | 11.0 | IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the W | MEDIUM 5.4 | 1.1 % | ||
| CVE-2016-9711 | 11.0 | IBM Predictive Solutions Foundation (IBM Cognos Analytics 11.0) reveals sensitive information in detailed error messages that could aid an a | MEDIUM 5.3 | 1.7 % | ||
| CVE-2017-1784 | 11.0 ; 11.0.1 ; 11.0.2 ; … | IBM Cognos Analytics 11.0 could produce results in temporary files that contain highly sensitive information that can be read by a local use | MEDIUM 5.5 | 0.4 % | ||
| CVE-2017-1783 | 11.0 ; 11.0.1 ; 11.0.2 ; … | IBM Cognos Analytics 11.0 could allow a local user to change parameters set from the Cognos Analytics menus without proper authentication. I | MEDIUM 4.0 | 0.5 % | ||
| CVE-2017-1779 | 11.0 ; 11.0.1 ; 11.0.2 ; … | IBM Cognos Analytics 11.0 could store cached credentials locally that could be obtained by a local user. IBM X-Force ID: 136824. | HIGH 7.8 | 0.4 % | ||
| CVE-2017-1535 | 11.0 | IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the W | MEDIUM 5.4 | 0.7 % | ||
| CVE-2017-1485 | 11.0 | IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the W | MEDIUM 5.4 | 0.5 % | ||
| CVE-2017-1428 | 11.0 | IBM Cognos Analytics 11.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malic | MEDIUM 6.1 | 1.2 % | ||
| CVE-2017-1427 | 11.0 | IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the W | MEDIUM 6.1 | 1.0 % |