Latest vulnerabilities for "ibm cognos analytics" 11.2.0-11.2.4 fp3

Filter

AND

Sort:

IBM Cognos Analytics18 vulnerabilities

First published (updated )

IBM-7173592

IBM Cognos Analytics cross-site scripting

medium

5.4

First published (updated )

CVE-2024-25042

SSRF

high

8.1

First published (updated )

CVE-2024-29415

IBM WebSphere Application Server server-side request forgery

medium

4.3

First published (updated )

CVE-2024-22329

IBM WebSphere Application Server Liberty cross-site scripting

medium

4.7

EPSS

0.04%

First published (updated )

CVE-2024-27270

Node.js is vulnerable to a denial of service, caused by a resource exhaustion flaw in fetch() brotli…

medium

6.5

EPSS

0.04%

First published (updated )

CVE-2024-22025

IBM WebSphere Application Server Liberty information disclosure

medium

5.3

First published (updated )

CVE-2023-50312

Node.js could allow a local attacker to gain elevated privileges on the system, caused by the failur…

high

7.3

First published (updated )

CVE-2024-22017

Path Traversal

high

7.9

EPSS

0.04%

First published (updated )

CVE-2024-21891

Path Traversal

high

7.9

EPSS

0.04%

First published (updated )

CVE-2024-21896

Node.js could allow a remote attacker to bypass security restrictions, caused by the improper handli…

medium

EPSS

0.04%

First published (updated )

CVE-2024-21890

Node.js could allow a local authenticated attacker to gain elevated privileges on the system, caused…

high

7.5

EPSS

0.04%

First published (updated )

CVE-2024-21892

Node.js is vulnerable to a denial of service, caused by an error when reading unprocessed HTTP reque…

high

7.5

EPSS

0.04%

First published (updated )

CVE-2024-22019

Node.js versions which bundle an unpatched version of OpenSSL or run against a dynamically linked ve…

high

7.4

First published (updated )

CVE-2023-46809

In Connect2id Nimbus JOSE+JWT before 9.37.2, an attacker can cause a denial of service (resource con…

high

7.5

First published (updated )

CVE-2023-52428

SSRF

critical

9.8

First published (updated )

CVE-2023-42282

Input Validation

medium

6.5

First published (updated )

CVE-2023-51775

Apache Santuario: Private Key disclosure in debug-log output

medium

6.5

First published (updated )

CVE-2023-44483

- Rapid Reset HTTP/2 vulnerability

high

7.5

Exploited

Zeroday

First published (updated )

CVE-2023-44487

IBM Cognos Analytics10 vulnerabilities

First published (updated )

IBM-7156941

IBM Cognos Analytics cross-site scripting

medium

5.4

First published (updated )

CVE-2024-25041

IBM Cognos Analytics improper certificate validation

medium

5.9

First published (updated )

CVE-2024-25053

In Clojure before 1.9.0, classes can be used to construct a serialized object that executes arbitrar…

critical

9.8

First published (updated )

CVE-2017-20189

Apache Shiro before 1.13.0 or 2.0.0-alpha-4, may be susceptible to a path traversal attack that results in an authentication bypass when used together with path rewriting

medium

6.6

First published (updated )

CVE-2023-46749

Apache Shiro: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Shiro.

high

7.4

First published (updated )

CVE-2023-46750

Code Injection

medium

5.3

First published (updated )

CVE-2023-39333

Node.js could allow a remote attacker to bypass security restrictions, caused by the circumvention o…

high

7.5

First published (updated )

CVE-2023-38552

Path Traversal

critical

9.8

First published (updated )

CVE-2023-39332

Path Traversal, Input Validation

high

7.7

First published (updated )

CVE-2023-39331

Incorrect cipher key & IV length processing

high

7.5

EPSS

0.11%

First published (updated )

CVE-2023-5363

IBM Cognos Analytics18 vulnerabilities

IBM Cognos Analytics cross-site scripting

SSRF

IBM WebSphere Application Server server-side request forgery

IBM WebSphere Application Server Liberty cross-site scripting

Node.js is vulnerable to a denial of service, caused by a resource exhaustion flaw in fetch() brotli…

IBM WebSphere Application Server Liberty information disclosure

Node.js could allow a local attacker to gain elevated privileges on the system, caused by the failur…

Path Traversal

Path Traversal

Node.js could allow a remote attacker to bypass security restrictions, caused by the improper handli…

Node.js could allow a local authenticated attacker to gain elevated privileges on the system, caused…

Node.js is vulnerable to a denial of service, caused by an error when reading unprocessed HTTP reque…

Node.js versions which bundle an unpatched version of OpenSSL or run against a dynamically linked ve…

In Connect2id Nimbus JOSE+JWT before 9.37.2, an attacker can cause a denial of service (resource con…

SSRF

Input Validation

Apache Santuario: Private Key disclosure in debug-log output

- Rapid Reset HTTP/2 vulnerability

IBM Cognos Analytics10 vulnerabilities

IBM Cognos Analytics cross-site scripting

IBM Cognos Analytics improper certificate validation

In Clojure before 1.9.0, classes can be used to construct a serialized object that executes arbitrar…

Apache Shiro before 1.13.0 or 2.0.0-alpha-4, may be susceptible to a path traversal attack that results in an authentication bypass when used together with path rewriting

Apache Shiro: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Shiro.

Code Injection

Node.js could allow a remote attacker to bypass security restrictions, caused by the circumvention o…

Path Traversal

Path Traversal, Input Validation

Incorrect cipher key & IV length processing

Company

Resources

Contact