CVSS: 6.5EPSS: 0%CPEs: 10EXPL: 0CVE-2021-20461
https://notcve.org/view.php?id=CVE-2021-20461
30 Jun 2021 — IBM Cognos Analytics 10.0 and 11.1 is susceptible to a weakness in the implementation of the System Appearance configuration setting. An attacker could potentially bypass business logic to modify the appearance and behavior of the application. IBM X-Force ID: 196770. IBM Cognos Analytics versiones 10.0 y 11.1, es susceptible a una debilidad en la implementación del ajuste de configuración de System Appearance. Un atacante podría omitir la lógica empresarial para modificar la apariencia y el comportamiento d... • https://exchange.xforce.ibmcloud.com/vulnerabilities/196770 • CWE-668: Exposure of Resource to Wrong Sphere •
CVSS: 10.0EPSS: 1%CPEs: 3EXPL: 0CVE-2020-4561
https://notcve.org/view.php?id=CVE-2020-4561
31 May 2021 — IBM Cognos Analytics 11.0 and 11.1 DQM API allows submitting of all control requests in unauthenticated sessions. This allows a remote attacker who can access a valid CA endpoint to read and write files to the Cognos Analytics system. IBM X-Force ID: 183903. La API DQM de IBM Cognos Analytics versiones 11.0 y 11.1 permite enviar todas las peticiones de control en sesiones no autenticadas. Esto permite a un atacante remoto que puede acceder a un endpoint de CA válido leer y escribir archivos en el sistema Co... • https://exchange.xforce.ibmcloud.com/vulnerabilities/183903 • CWE-829: Inclusion of Functionality from Untrusted Control Sphere •
CVSS: 8.8EPSS: 0%CPEs: 3EXPL: 0CVE-2020-4520
https://notcve.org/view.php?id=CVE-2020-4520
31 May 2021 — IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to inject malicious HTML code that when viewed by the authenticated victim would execute the code. IBM X-Force ID: 182395. IBM Cognos Analytics versiones 11.0 y 11.1 podrían permitir a un atacante remoto inyectar código HTML malicioso que, cuando es visto por la víctima autenticada, podría ejecutar el código. IBM X-Force ID: 182395 • https://exchange.xforce.ibmcloud.com/vulnerabilities/182395 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.4EPSS: 0%CPEs: 3EXPL: 0CVE-2020-4354
https://notcve.org/view.php?id=CVE-2020-4354
31 May 2021 — IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 178506. IBM Cognos Analytics versiones 11.0 y 11.1 es vulnerable a ataque de tipo cross-site scripting. Esta vulnerabilidad permite a usuarios insertar código JavaScript arbitrario en la interfaz de usuario web, alterando así la... • https://exchange.xforce.ibmcloud.com/vulnerabilities/178506 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 8.2EPSS: 0%CPEs: 3EXPL: 0CVE-2020-4300
https://notcve.org/view.php?id=CVE-2020-4300
31 May 2021 — IBM Cognos Analytics 11.0 and 11.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 176607. IBM Cognos Analytics versiones 11.0 y 11.1 es vulnerable a un ataque de tipo XML External Entity Injection (XXE) al procesar datos XML. Un atacante remoto podría explotar esta vulnerabilidad para exponer información confidencial o consumir recursos de ... • https://exchange.xforce.ibmcloud.com/vulnerabilities/176607 • CWE-611: Improper Restriction of XML External Entity Reference •
CVSS: 7.1EPSS: 0%CPEs: 3EXPL: 0CVE-2019-4730
https://notcve.org/view.php?id=CVE-2019-4730
31 May 2021 — IBM Cognos Analytics 11.0 and 11.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 172533. IBM Cognos Analytics versiones 11.0 y 11.1 es vulnerable a un ataque de tipo XML External Entity Injection (XXE) al procesar datos XML. Un atacante remoto podría aprovechar esta vulnerabilidad para exponer información confidencial o consumir recursos d... • https://exchange.xforce.ibmcloud.com/vulnerabilities/172533 • CWE-611: Improper Restriction of XML External Entity Reference •
CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 0CVE-2019-4724
https://notcve.org/view.php?id=CVE-2019-4724
31 May 2021 — IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain credentials from a user's browser via incorrect autocomplete settings in New Content Backup page. IBM X-Force ID: 172130. IBM Cognos Analytics versiones 11.0 y 11.1 podrían permitir a un atacante remoto obtener credenciales del navegador de un usuario por medio de una configuración incorrecta de autocompletar en la página New Content Backup. IBM X-Force ID: 172130 • https://exchange.xforce.ibmcloud.com/vulnerabilities/172130 • CWE-522: Insufficiently Protected Credentials •
CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 0CVE-2019-4723
https://notcve.org/view.php?id=CVE-2019-4723
31 May 2021 — IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain credentials from a user's browser via incorrect autocomplete settings in New Data Server Connection page. IBM X-Force ID: 172129. IBM Cognos Analytics versiones 11.0 y 11.1 podrían permitir a un atacante remoto obtener credenciales del navegador de un usuario por medio de una configuración incorrecta de autocompletar en la página New Data Server Connection. ID de IBM X-Force: 172129 • https://exchange.xforce.ibmcloud.com/vulnerabilities/172129 • CWE-522: Insufficiently Protected Credentials •
CVSS: 4.3EPSS: 0%CPEs: 3EXPL: 0CVE-2019-4722
https://notcve.org/view.php?id=CVE-2019-4722
31 May 2021 — IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information via a stack trace due to mishandling of certain error conditions. IBM X-Force ID: 172128. IBM Cognos Analytics versiones 11.0 y 11.1 podrían permitir a un atacante remoto obtener información confidencial por medio de un seguimiento de laregión stack debido al mal manejo de ciertas condiciones de error. ID de IBM X-Force: 172128 • https://exchange.xforce.ibmcloud.com/vulnerabilities/172128 • CWE-755: Improper Handling of Exceptional Conditions •
CVSS: 5.4EPSS: 0%CPEs: 3EXPL: 0CVE-2019-4653
https://notcve.org/view.php?id=CVE-2019-4653
31 May 2021 — IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 170964. IBM Cognos Analytics versiones 11.0 y 11.1 es vulnerable a ataques de tipo cross-site scripting. Esta vulnerabilidad permite a usuarios insertar código JavaScript arbitrario en la interfaz de usuario web, alterando así l... • https://exchange.xforce.ibmcloud.com/vulnerabilities/170964 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •