CVE-2023-35011

Published: Aug 16, 2023Modified: Nov 21, 2024

5.4

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.5

Source: NVD

Description

IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 257705.

Affected (14)

Products: Ibm: Cognos Analytics

Ibm

1 product

Cognos Analytics

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Ibm Cognos Analytics	From 11.1.0 to 11.1.7
Ibm Cognos Analytics	From 11.2.0 to 11.2.4
Ibm Cognos Analytics	Version 11.1.7
Ibm Cognos Analytics	Version 11.1.7 interimfix1
Ibm Cognos Analytics	Version 11.1.7 interimfix2
Ibm Cognos Analytics	Version 11.1.7 interimfix3
Ibm Cognos Analytics	Version 11.1.7 interimfix4
Ibm Cognos Analytics	Version 11.1.7 interimfix5
Ibm Cognos Analytics	Version 11.1.7 interimfix6
Ibm Cognos Analytics	Version 11.1.7 interimfix7
Ibm Cognos Analytics	Version 11.1.7 interimfix8
Ibm Cognos Analytics	Version 11.1.7 interimfix9
Ibm Cognos Analytics	Version 11.2.4
Ibm Cognos Analytics	Version 11.2.4 fixpack1