CVSS: 6.5EPSS: 0%CPEs: 7EXPL: 0CVE-2021-29716
https://notcve.org/view.php?id=CVE-2021-29716
IBM Cognos Analytics 11.1.7 and 11.2.0 could allow a low level user to reas of the application that privileged user should only be allowed to view. IBM X-Force ID: 201087. IBM Cognos Analytics versiones 11.1.7 y 11.2.0, podría permitir a un usuario de bajo nivel leer de la aplicación que el usuario privilegiado sólo debería poder visualizar. IBM X-Force ID: 201087 • https://exchange.xforce.ibmcloud.com/vulnerabilities/201087 https://security.netapp.com/advisory/ntap-20211223-0006 https://www.ibm.com/support/pages/node/6520510 •
CVSS: 6.1EPSS: 0%CPEs: 7EXPL: 0CVE-2021-20493
https://notcve.org/view.php?id=CVE-2021-20493
IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 197794. IBM Cognos Analytics versiones 11.1.7 y 11.2.0, es vulnerable a un ataque de tipo cross-site scripting. Esta vulnerabilidad permite a usuarios insertar código JavaScript arbitrario en la Interfaz de Usuario Web, alterando así la funcionalidad prevista y conllevando potencialmente a una divulgación de credenciales dentro de una sesión confiable. • https://exchange.xforce.ibmcloud.com/vulnerabilities/197794 https://security.netapp.com/advisory/ntap-20211223-0006 https://www.ibm.com/support/pages/node/6520510 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 7.5EPSS: 0%CPEs: 7EXPL: 0CVE-2021-20470
https://notcve.org/view.php?id=CVE-2021-20470
IBM Cognos Analytics 11.1.7 and 11.2.0 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 196339. IBM Cognos Analytics versiones 11.1.7 y 11.2.0, no exigen que los usuarios tengan contraseñas seguras por defecto, lo que facilita a atacantes comprometer las cuentas de usuarios. IBM X-Force ID: 196339 • https://exchange.xforce.ibmcloud.com/vulnerabilities/196939 https://security.netapp.com/advisory/ntap-20211223-0006 https://www.ibm.com/support/pages/node/6520510 • CWE-521: Weak Password Requirements •
CVSS: 8.8EPSS: 0%CPEs: 3EXPL: 0CVE-2021-29745
https://notcve.org/view.php?id=CVE-2021-29745
IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to priviledge escalation where a lower evel user could have access to the 'New Job' page to which they should not have access to. IBM X-Force ID: 201695. IBM Cognos Analytics versiones 11.1.7 y 11.2.0, es vulnerable a una escalada de privilegios en la que un usuario de nivel inferior podría tener acceso a la página "New Job" a la que no debería tener acceso. IBM X-Force ID: 201695 • https://exchange.xforce.ibmcloud.com/vulnerabilities/201695 https://security.netapp.com/advisory/ntap-20211112-0005 https://www.ibm.com/support/pages/node/6491661 •
CVSS: 8.8EPSS: 0%CPEs: 3EXPL: 0CVE-2021-29679
https://notcve.org/view.php?id=CVE-2021-29679
IBM Cognos Analytics 11.1.7 and 11.2.0 could allow an authenticated user to execute code remotely due to incorrectly neutralizaing user-contrlled input that could be interpreted a a server-side include (SSI) directive. IBM X-Force ID: 199915. IBM Cognos Analytics versiones 11.1.7 y 11.2.0, podrían permitir a un usuario autenticado ejecutar código de forma remota debido a una neutralización incorrecta de la entrada controlada por el usuario que podría interpretarse como una directiva de tipo server-side include (SSI). IBM X-Force ID: 199915 • https://exchange.xforce.ibmcloud.com/vulnerabilities/199915 https://security.netapp.com/advisory/ntap-20211112-0005 https://www.ibm.com/support/pages/node/6491661 • CWE-94: Improper Control of Generation of Code ('Code Injection') •