CVEvulnerability
CVE-2025-0923
5.3 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2025-06-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- Weaknesses
- CWE-540
Description
IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, 12.0.2, 12.0.3, and 12.0.4 stores source code on the web server that could aid in further attacks against the system.
Affected configurations
• ibm cognos analytics (>= 11.2.0 <= 11.2.4)
• ibm cognos analytics (>= 12.0.0 <= 12.0.4)
• ibm cognos analytics 11.2.4
Related
Weakness · CWE (1)
- CWE-540 Inclusion of Sensitive Information in Source Code weakness
References
- https://www.ibm.com/support/pages/node/7234674 Vendor Advisory