Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
NA

CVE-2023-35011

Published: 16/08/2023 Updated: 21/09/2023
CVSS v3 Base Score: 5.4 | Impact Score: 2.5 | Exploitability Score: 2.8
VMScore: 0
Subscribe to Cognos Analytics

Vulnerability Summary

IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated malicious user to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 257705.

Vulnerable Product Search on Vulmon Subscribe to Product

ibm cognos analytics 11.1.7

ibm cognos analytics

ibm cognos analytics 11.2.4

References

CWE-918https://www.ibm.com/support/pages/node/7026692https://exchange.xforce.ibmcloud.com/vulnerabilities/257705https://security.netapp.com/advisory/ntap-20230921-0005/https://nvd.nist.gov
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-49333CVE-2024-33901CVE-2024-36001CVE-2024-2835firewallXPath injectionauthentication bypassCVE-2024-22120CVE-2024-32002
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook