CA
Product
Cognos Analytics Certified Containers
110
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 6High 24Medium 78Low 2
Watch
Add Cognos Analytics Certified Containers to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-20493 | 6.1 | Dec 3 | IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site scripting Affected: 11.1.0 before 11.1.7; 11.1.7; 11.1.7; 11.1.7; 11.1.7; 11.2.0 |
| CVE-2019-4645 | 6.1 | Nov 9 | IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting Affected: 11.0.0; 11.1.0 |
| CVE-2017-1428 | 6.1 | Aug 29 | IBM Cognos Analytics 11.0 could allow a remote attacker to hijack the clicking action of the victim Affected: 11.0.0; 11.0.1; 11.0.2; 11.0.3; 11.0.4; 11.0.5; +1 more |
| CVE-2017-1427 | 6.1 | Aug 29 | IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting Affected: 11.0.0; 11.0.1; 11.0.2; 11.0.3; 11.0.4; 11.0.5; +1 more |
| CVE-2025-33147 | 5.9 | Sep 18 | IBM Cognos Analytics versions 12.0.4 and 12.1.3 is affected by security vulnerabilities Affected: 12.1.0 through 12.1.3 FP1; 12.0.4 through 12.0.4 FP2 |
| CVE-2024-56344 | 5.9 | Sep 18 | IBM Cognos Analytics 12.0.4 and 12.1.3 versions are affected by security vulnerabilities Affected: 12.0.4 through 12.0.4 FP2; 12.1.0 through 12.1.3 FP1 |
| CVE-2023-38009 | 5.9 | Jan 26 | IBM Cognos Analytics Mobile information disclosure Affected: 1.1 |
| CVE-2024-25053 | 5.9 | Jun 28 | IBM Cognos Analytics improper certificate validation Affected: 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, 12.0.2 |
| CVE-2024-40703 | 5.5 | Sep 22 | IBM Cognos Analytics information disclosure Affected: 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, 12.0.2, 12.0.3 |
| CVE-2021-39045 | 5.5 | Sep 1 | IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could allow a local attacker to obtain information due to the autocomplete feature on password input fields Affected: 11.1.0 before 11.1.7; 11.2.0 before 11.2.3; 11.1.7; 11.1.7; 11.1.7; 11.1.7; +1 more |
| CVE-2021-39009 | 5.5 | Sep 1 | IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 stores user credentials in plain clear text which can be read by a local privileged user Affected: 11.1.0 before 11.1.7; 11.2.0 before 11.2.3; 11.1.7; 11.1.7; 11.1.7; 11.1.7; +1 more |
| CVE-2017-1784 | 5.5 | Jan 29 | IBM Cognos Analytics 11.0 could produce results in temporary files that contain highly sensitive information that can be read by a local user Affected: 11.0.0; 11.0.1; 11.0.2; 11.0.3; 11.0.4; 11.0.5.0; +2 more |
| CVE-2026-7884 | 5.4 | Sep 14 | IBM Cognos Analytics versions 12.0.4 and 12.1.3 is affected by security vulnerabilities Affected: 12.1.0 through 12.1.3 FP1; 12.0.4 through 12.0.4 FP2 |
| CVE-2024-52900 | 5.4 | Jun 28 | IBM Cognos Analytics cross-site scripting Affected: 11.2.0 through 11.2.4 FP5; 12.0.0 through 12.0.4 |
| CVE-2024-25041 | 5.4 | Jun 28 | IBM Cognos Analytics cross-site scripting Affected: 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, 12.0.2 |
| CVE-2023-43051 | 5.4 | Feb 24 | IBM Cognos Analytics cross-site scripting Affected: 11.1.7, 11.2.4, 12.0.0 |
| CVE-2023-35011 | 5.4 | Aug 16 | IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to server-side request forgery (SSRF) Affected: 11.1.0 before 11.1.7; 11.2.0 before 11.2.4; 11.1.7; 11.1.7; 11.1.7; 11.1.7; +8 more |
| CVE-2023-28530 | 5.4 | Jul 22 | IBM Cognos Analytics 11.1 and 11.2 is vulnerable to stored cross-site scripting, caused by improper validation of SVG Files in Custom Visualizations Affected: 11.1.0 before 11.1.7; 11.2.0 before 11.2.4; 11.1.7; 11.1.7; 11.1.7; 11.1.7; +5 more |
| CVE-2023-25929 | 5.4 | Jul 22 | IBM Cognos Analytics 11.1 and 11.2 is vulnerable to cross-site scripting Affected: 11.1.0 before 11.1.7; 11.2.0 before 11.2.4; 11.1.7; 11.1.7; 11.1.7; 11.1.7; +5 more |
| CVE-2021-38946 | 5.4 | Apr 22 | IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to cross-site scripting Affected: 11.1.7; 11.2.0; 11.2.1 |
| CVE-2021-38903 | 5.4 | Apr 22 | IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input Affected: 11.1.7; 11.2.0; 11.2.1 |
| CVE-2021-38909 | 5.4 | Dec 3 | IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site scripting Affected: 11.1.0 before 11.1.7; 11.1.7; 11.1.7; 11.1.7; 11.1.7; 11.2.0 |
| CVE-2021-29867 | 5.4 | Dec 3 | IBM Cognos Analytics 11.1.7 and 11.2.0 could allow an authenticated to view or edit a Jupyter notebook that they should not have access to Affected: 11.1.0 before 11.1.7; 11.1.7; 11.1.7; 11.1.7; 11.1.7; 11.2.0 |
| CVE-2020-4354 | 5.4 | Jun 1 | IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting Affected: 11.0.0; 11.1.0 |
| CVE-2019-4653 | 5.4 | Jun 1 | IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting Affected: 11.0.0; 11.1.0 |
| CVE-2019-4623 | 5.4 | Dec 30 | IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting Affected: 11.0.0; 11.1.0 |
| CVE-2019-4555 | 5.4 | Dec 20 | IBM Cognos Analytics 11.0 and 11.0 is vulnerable to cross-site scripting Affected: 11.0.0 through 11.0.12; 11.1.0 before 11.1.4; 11.0.13; 11.0.13; 11.0.13 |
| CVE-2019-4342 | 5.4 | Sep 17 | IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting Affected: 11.0.0; 11.1.0 |
| CVE-2019-4139 | 5.4 | May 29 | IBM Cognos Analytics 11.0, 11.1.0, and 11.1.1 is vulnerable to cross-site scripting Affected: 11.0.0; 11.1.0; 11.1.1 |
| CVE-2018-1413 | 5.4 | May 7 | IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting Affected: 11.0.0.0 through 11.0.10.0 |
| CVE-2017-1535 | 5.4 | Aug 29 | IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting Affected: 11.0.0; 11.0.1; 11.0.2; 11.0.3; 11.0.4; 11.0.5; +1 more |
| CVE-2017-1485 | 5.4 | Aug 29 | IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting Affected: 11.0.0; 11.0.1; 11.0.2; 11.0.3; 11.0.4; 11.0.5; +1 more |
| CVE-2016-3032 | 5.4 | May 10 | IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting Affected: 11.0.0; 11.0.1; 11.0.2; 11.0.3; 11.0.4; 11.0.5; +1 more |
| CVE-2016-3031 | 5.4 | Apr 5 | IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting Affected: 11.0.0; 11.0.1; 11.0.2; 11.0.3; 11.0.4 |
| CVE-2016-3015 | 5.4 | Apr 5 | IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting Affected: 11.0.0; 11.0.1; 11.0.2; 11.0.3; 11.0.4 |
| CVE-2016-0217 | 5.4 | Feb 1 | IBM Cognos Business Intelligence and IBM Cognos Analytics are vulnerable to stored cross-site scripting, caused by improper validation of user-supplied input Affected: 11.0.0; 11.0.1; 11.0.2; 11.0.3; 11.0.4 |
| CVE-2025-33150 | 5.3 | Nov 10 | IBM Cognos Analytics Certified Containers information disclosure Affected: 12.1.0 |
| CVE-2025-0923 | 5.3 | Jun 11 | IBM Cognos Analytics information disclosure Affected: 11.2.0; 11.2.1; 11.2.2; 11.2.3; 11.2.4; 12.0.0; +4 more |
| CVE-2023-30996 | 5.3 | Feb 24 | IBM Cognos Analytics cross-origin resource sharing Affected: 11.1.7, 11.2.4, 12.0.0 |
| CVE-2023-35009 | 5.3 | Aug 16 | IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could allow a remote attacker to obtain system information without authentication which could be used in reconnaissance to gather… Affected: 11.1.0 before 11.1.7; 11.2.0 before 11.2.4; 11.1.7; 11.1.7; 11.1.7; 11.1.7; +8 more |
| CVE-2022-43887 | 5.3 | Dec 19 | IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could be vulnerable to sensitive information exposure by passing API keys to log files Affected: 11.1.0 before 11.1.7; 11.2.0 through 11.2.3; 11.1.7; 11.1.7; 11.1.7; 11.1.7; +2 more |
| CVE-2021-29719 | 5.3 | Dec 3 | IBM Cognos Analytics 11.1.7 and 11.2.0 could be vulnerable to client side vulnerabilties due to a web response specifying an incorrect content type Affected: 11.1.0 before 11.1.7; 11.1.7; 11.1.7; 11.1.7; 11.1.7; 11.2.0 |
| CVE-2019-4366 | 5.3 | Aug 3 | IBM Cognos Analytics 11.0 and 11.1 is susceptible to an information disclosure vulnerability where an attacker could gain access to cached browser data Affected: 11.0.0; 11.1.0 |
| CVE-2016-9711 | 5.3 | Mar 22 | IBM Predictive Solutions Foundation (IBM Cognos Analytics 11.0) reveals sensitive information in detailed error messages that could aid an attacker in further attacks against the… Affected: 11.0.0 |
| CVE-2024-45082 | 5.2 | Dec 18 | IBM Cognos Analytics HTTP open redirection Affected: 11.2.0 through 11.2.4; 12.0.0 through 12.0.3 |
| CVE-2025-0917 | 4.8 | Jun 11 | IBM Cognos Analytics cross-site scripting Affected: 11.2.0; 11.2.1; 11.2.2; 11.2.3; 11.2.4; 12.0.0; +4 more |
| CVE-2025-36076 | 4.3 | Sep 18 | IBM Cognos Analytics versions 12.0.4 and 12.1.3 is affected by security vulnerabilities Affected: 12.1.0 through 12.1.3 FP1; 12.0.4 through 12.0.4 FP2 |
| CVE-2023-32344 | 4.3 | Feb 24 | IBM Cognos Analytics cross-site request forgery Affected: e |
| CVE-2021-38905 | 4.3 | Apr 22 | IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 could allow an authenticated user to view report pages that they should not have access to Affected: 11.1.7; 11.2.0; 11.2.1 |
| CVE-2021-29824 | 4.3 | Apr 22 | IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to priviledge escalation where a lower level user could have read access to to the 'Data Connections' page to which… Affected: 11.1.7; 11.2.0; 11.2.1 |