← Back

CVE-2024-25047

nvd nist
Published: May 2, 2024Modified: Jun 17, 2026

JSON object

Loading...
8.6
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Exploitability: 3.9 / Impact: 4.0
Source: psirt@us.ibm.com (Secondary)

Description

IBM Cognos Analytics 11.2.0 through 11.2.4 and 12.0.0 through 12.0.2 is vulnerable to injection attacks in application logging by not sanitizing user provided data. This could lead to further attacks against the system. IBM X-Force ID: 282956.

Affected (6)

Ibm
1 product
Cognos Analytics
Netapp
1 product
Oncommand Insight
Configuration A
5 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Cognos Analytics
From 11.2.0 to 11.2.4
Cognos Analytics
From 12.0.0 to 12.0.3
Cognos Analytics
Version 11.2.4
Cognos Analytics
Version 11.2.4 fixpack1
Cognos Analytics
Version 11.2.4 fixpack2
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Oncommand Insight
All versions

Related CWEs

CWE-117
Improper Output Neutralization for Logs
The product does not neutralize or incorrectly neutralizes output that is written to logs.

References (6)

Source: psirt@us.ibm.com
VDB EntryVendor Advisory
Source: psirt@us.ibm.com
Third Party Advisory
Source: psirt@us.ibm.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
VDB EntryVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.