CVE-2021-20461

Published: Jun 30, 2021Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

IBM Cognos Analytics 10.0 and 11.1 is susceptible to a weakness in the implementation of the System Appearance configuration setting. An attacker could potentially bypass business logic to modify the appearance and behavior of the application. IBM X-Force ID: 196770.

Affected (10)

Products: Ibm: Cognos Analytics · Netapp: Oncommand Insight

1 product

1 product

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Ibm Cognos Analytics	11.0.0 ≤ version < 11.0.13
Ibm Cognos Analytics	11.1.0 ≤ version < 11.1.7
Ibm Cognos Analytics	Version 11.0.13
Ibm Cognos Analytics	Version 11.0.13 fixpack1
Ibm Cognos Analytics	Version 11.0.13 fixpack2
Ibm Cognos Analytics	Version 11.0.13 fixpack3
Ibm Cognos Analytics	Version 11.1.7
Ibm Cognos Analytics	Version 11.1.7 fixpack1
Ibm Cognos Analytics	Version 11.1.7 fixpack2