CVE-2024-25047: IBM Cognos Analytics log injection
First published: Wed May 01 2024(Updated: )
IBM Cognos Analytics 11.2.0 through 11.2.4 and 12.0.0 through 12.0.2 is vulnerable to injection attacks in application logging by not sanitizing user provided data. This could lead to further attacks against the system. IBM X-Force ID: 282956.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Cognos Analytics | <=12.0-12.0.2 | |
| IBM Cognos Analytics | <=11.2.0-11.2.4 FP2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- agent/weakness
- agent/title
- agent/type
- agent/softwarecombine
- agent/description
- agent/first-publish-date
- agent/severity
- agent/author
- agent/references
- agent/tags
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- agent/event
- collector/nvd-api
- source/NVD
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/trending
- vendor/ibm
- canonical/ibm cognos analytics
- version/ibm cognos analytics/12.0-12.0.2
- version/ibm cognos analytics/11.2.0-11.2.4 fp2