CVE-2022-43887

Published: Dec 19, 2022Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could be vulnerable to sensitive information exposure by passing API keys to log files. If these keys contain sensitive information, it could lead to further attacks. IBM X-Force ID: 240450.

Affected (8)

Products: Ibm: Cognos Analytics

Ibm

1 product

Cognos Analytics

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Ibm Cognos Analytics	From 11.1.0 to 11.1.7
Ibm Cognos Analytics	From 11.2.0 to 11.2.3
Ibm Cognos Analytics	Version 11.1.7
Ibm Cognos Analytics	Version 11.1.7 fixpack1
Ibm Cognos Analytics	Version 11.1.7 fixpack2
Ibm Cognos Analytics	Version 11.1.7 fixpack3
Ibm Cognos Analytics	Version 11.1.7 fixpack4
Ibm Cognos Analytics	Version 11.1.7 fixpack5