CVE-2023-35009

Published: Aug 16, 2023Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could allow a remote attacker to obtain system information without authentication which could be used in reconnaissance to gather information that could be used for future attacks. IBM X-Force ID: 257703.

Affected (14)

Products: Ibm: Cognos Analytics

Ibm

1 product

Cognos Analytics

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Ibm Cognos Analytics	From 11.1.0 to 11.1.7
Ibm Cognos Analytics	From 11.2.0 to 11.2.4
Ibm Cognos Analytics	Version 11.1.7
Ibm Cognos Analytics	Version 11.1.7 interimfix1
Ibm Cognos Analytics	Version 11.1.7 interimfix2
Ibm Cognos Analytics	Version 11.1.7 interimfix3
Ibm Cognos Analytics	Version 11.1.7 interimfix4
Ibm Cognos Analytics	Version 11.1.7 interimfix5
Ibm Cognos Analytics	Version 11.1.7 interimfix6
Ibm Cognos Analytics	Version 11.1.7 interimfix7
Ibm Cognos Analytics	Version 11.1.7 interimfix8
Ibm Cognos Analytics	Version 11.1.7 interimfix9
Ibm Cognos Analytics	Version 11.2.4
Ibm Cognos Analytics	Version 11.2.4 fixpack1