CVEvulnerability
CVE-2024-25047
8.6 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2024-05-02
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.6 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
- Weaknesses
- CWE-117
Description
IBM Cognos Analytics 11.2.0 through 11.2.4 and 12.0.0 through 12.0.2 is vulnerable to injection attacks in application logging by not sanitizing user provided data. This could lead to further attacks against the system. IBM X-Force ID: 282956.
Affected configurations
• ibm cognos analytics (>= 11.2.0 < 11.2.4)
• ibm cognos analytics (>= 12.0.0 < 12.0.3)
• ibm cognos analytics 11.2.4
• netapp oncommand insight
Related
Weakness · CWE (1)
- CWE-117 Improper Output Neutralization for Logs weakness
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/282956 VDB Entry, Vendor Advisory
- https://security.netapp.com/advisory/ntap-20240621-0007/ Third Party Advisory
- https://www.ibm.com/support/pages/node/7149874 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/282956 VDB Entry, Vendor Advisory
- https://security.netapp.com/advisory/ntap-20240621-0007/ Third Party Advisory
- https://www.ibm.com/support/pages/node/7149874 Patch, Vendor Advisory