CVE-2022-34357: IBM Cognos Analytics Mobile Server denial of service

First published: Sat Feb 24 2024(Updated: )

IBM Cognos Analytics Mobile Server 11.1.7, 11.2.4, and 12.0.0 is vulnerable to Denial of Service due to due to weak or absence of rate limiting. By making unlimited http requests, it is possible for a single user to exhaust server resources over a period of time making service unavailable for other legitimate users. IBM X-Force ID: 230510.

Credit: psirt@us.ibm.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/type
• agent/weakness
• agent/title
• agent/description
• agent/severity
• agent/author
• collector/ibm-support
• source/IBM
• agent/software-canonical-lookup
• agent/first-publish-date
• agent/references
• collector/mitre-cve
• source/MITRE
• collector/nvd-api
• source/NVD
• agent/last-modified-date
• agent/softwarecombine
• agent/event
• agent/trending
• agent/tags
• agent/source
• vendor/ibm
• canonical/ibm cognos analytics
• version/ibm cognos analytics/12.0.0-12.0.1
• version/ibm cognos analytics/11.2.0-11.2.4 fp2
• version/ibm cognos analytics/11.1.1-11.1.7 fp7
• vendor/netapp
• canonical/netapp oncommand insight
• version/ibm cognos analytics/11.1.1
• version/ibm cognos analytics/11.2.0
• version/ibm cognos analytics/11.1.7
• version/ibm cognos analytics/11.1.7-fixpack1
• version/ibm cognos analytics/11.1.7-fixpack2
• version/ibm cognos analytics/11.1.7-fixpack3
• version/ibm cognos analytics/11.1.7-fixpack4
• version/ibm cognos analytics/11.1.7-fixpack5
• version/ibm cognos analytics/11.1.7-fixpack6
• version/ibm cognos analytics/11.1.7-fixpack7
• version/ibm cognos analytics/11.2.4
• version/ibm cognos analytics/11.2.4-fixpack1
• version/ibm cognos analytics/11.2.4-fixpack2
• version/ibm cognos analytics/12.0.0
• version/ibm cognos analytics/12.0.1