Patchwire CVEs, their patch status, and feeds to follow them

CVE-2024-25047

No fix known EPSS <1%CVSS 8.6

IBM Cognos Analytics 11.2.0 through 11.2.4 and 12.0.0 through 12.0.2 is vulnerable to injection attacks in application logging by not sanitizing user provided data. This could lead to further attacks against the system. IBM X-Force ID: 282956.

Published 2024-05-02 · CVE record · OSV

Products: IBM Cognos Analytics