MEDIUM🇵🇱 Wersja polska

CVE-2025-0923

CVSS 5.3v3.1pub. 2025-06-11upd. 2025-06-17

IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, 12.0.2, 12.0.3, and 12.0.4 stores source code on the web server that could aid in further attacks against the system.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

  • IBM Cognos Analytics

    APP
    Ibm
    11.2.411.2.0 – 11.2.412.0.0 – 12.0.4
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2024-51466CRITICAL9.0PL ✓ten sam produkt

IBM Cognos Analytics — podatność Expression Language Injection (EL Injection)

CVE-2021-38945CRITICAL9.8ten sam produkt

IBM Cognos Analytics 11.2.1, 11.2.0, and 11.1.7 could allow a remote attacker to upload arbitrary files, cause...

CVE-2020-4561CRITICAL10.0ten sam produkt

IBM Cognos Analytics 11.0 and 11.1 DQM API allows submitting of all control requests in unauthenticated sessio...

CVE-2020-4377CRITICAL9.1ten sam produkt

IBM Cognos Anaytics 11.0 and 11.1 is vulnerable to an XML External Entity Injection (XXE) attack when processi...

CVE-2025-25032HIGH7.5ten sam produkt

IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, 12.0.2, 12.0.3, and 12.0.4 could ...