CVE-2025-36076Medium 4.3IBM Cognos Analytics versions 12.0.4 and 12.1.3 is affected by security vulnerabilities0.3%
CVE-2025-33147Medium 5.9IBM Cognos Analytics versions 12.0.4 and 12.1.3 is affected by security vulnerabilities0.2%
CVE-2024-56344Medium 5.9IBM Cognos Analytics 12.0.4 and 12.1.3 versions are affected by security vulnerabilities0.3%
CVE-2026-7884Medium 5.4IBM Cognos Analytics versions 12.0.4 and 12.1.3 is affected by security vulnerabilities0.2%
CVE-2026-15995Medium 5.4IBM Cognos Analytics 12.1.3 general availability package contains a data integrity issue in the Agentic AI assistant that may cause incorrect report summaries or report-processing errors under concurrent use0.2%
CVE-2025-3633Medium 5.4IBM Cognos Analytics is affected by multiple security vulnerabilities0.3%
CVE-2025-36126Medium 6.4IBM Cognos Analytics is affected by Cross-site scripting.0.2%
CVE-2022-36773High 7.1IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose se2.3%
CVE-2022-30614Medium 6.5IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to a denial of service via email flooding caused by sending a specially-crafted request. A remote attacker could exploit this vulnerabilit1.8%
CVE-2021-39045Medium 6.2IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could allow a local attacker to obtain information due to the autocomplete feature on password input fields. IBM X-Force ID: 214345.0.2%
CVE-2021-39009Medium 4.4IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 stores user credentials in plain clear text which can be read by a local privileged user. IBM X-Force ID: 213554.0.2%
CVE-2021-29823Medium 4.3IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the0.5%
CVE-2021-20468Medium 4.3IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the0.4%
CVE-2020-4301Medium 4.3IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the0.4%
CVE-2021-39047Medium 6.1IBM Planning Analytics 2.0 and IBM Cognos Analytics 11.2.1, 11.2.0, and 11.1.7 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI 0.9%
CVE-2021-38945Medium 6.3IBM Cognos Analytics 11.2.1, 11.2.0, and 11.1.7 could allow a remote attacker to upload arbitrary files, caused by improper content validation. IBM X-Force ID: 211238.1.8%
CVE-2021-29768Medium 4.3IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could allow a low level user to obtain sensitive information from the details of the 'Cloud Storage' page for which they should not have access. IBM X-F1.0%
CVE-2021-38946Medium 5.4IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended funct0.7%
CVE-2021-38905Medium 4.3IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 could allow an authenticated user to view report pages that they should not have access to. IBM X-Force ID: 209697.0.9%
CVE-2021-38904Medium 4.6IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 could allow a remote attacker to obtain credentials from a user's browser via incorrect autocomplete settings. IBM X-Force ID: 209693.1.8%