CVSS: 8.8EPSS: 0%CPEs: 3EXPL: 0CVE-2021-29679
https://notcve.org/view.php?id=CVE-2021-29679
IBM Cognos Analytics 11.1.7 and 11.2.0 could allow an authenticated user to execute code remotely due to incorrectly neutralizaing user-contrlled input that could be interpreted a a server-side include (SSI) directive. IBM X-Force ID: 199915. IBM Cognos Analytics versiones 11.1.7 y 11.2.0, podrían permitir a un usuario autenticado ejecutar código de forma remota debido a una neutralización incorrecta de la entrada controlada por el usuario que podría interpretarse como una directiva de tipo server-side include (SSI). IBM X-Force ID: 199915 • https://exchange.xforce.ibmcloud.com/vulnerabilities/199915 https://security.netapp.com/advisory/ntap-20211112-0005 https://www.ibm.com/support/pages/node/6491661 • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 4.0EPSS: 0%CPEs: 3EXPL: 0CVE-2020-4951
https://notcve.org/view.php?id=CVE-2020-4951
IBM Cognos Analytics 11.1.7 and 11.2.0 contains locally cached browser data, that could allow a local attacker to obtain sensitive information. IBM Cognos Analytics versiones 11.1.7 y 11.2.0, contiene datos del navegador almacenados en caché localmente, que podría permitir a un atacante local obtener información confidencial • https://exchange.xforce.ibmcloud.com/vulnerabilities/192027 https://security.netapp.com/advisory/ntap-20211112-0005 https://www.ibm.com/support/pages/node/6491661 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •