Lucene search
China National Vulnerability DatabaseCNVD-2022-91133HistoryDec 21, 2022 - 12:00 a.m.
IBM Cognos Analytics Server-Side Request Forgery Vulnerability
2022-12-2100:00:00
China National Vulnerability Database
www.cnvd.org.cn
17
ibm cognos analytics
server-side request forgery
vulnerability
business intelligence software
ibm corporation
united states
versions 11.1.7
11.2.0
11.2.1
attacker
arbitrary requests
internal network
local file system
cnvd
0.001 Low
EPSS
Percentile
42.0%
IBM Cognos Analytics is a suite of business intelligence software from IBM Corporation in the United States. IBM Cognos Analytics versions 11.1.7, 11.2.0 and 11.2.1 are vulnerable to server-side request forgery. An attacker could use the vulnerability to send arbitrary requests to the internal network or local file system.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ibm ibm cognos analytics | eq | 11.1.7 | |
| ibm ibm cognos analytics | eq | 11.2.0 | |
| ibm ibm cognos analytics | eq | 11.2.1 |
Related
nvd
nvd
CVE-2022-38708
2022-12-19 21:15:10
cve
cve
CVE-2022-38708
2022-12-19 21:15:10
prion
prion
Server side request forgery (ssrf)
2022-12-19 21:15:00
cvelist
cvelist
CVE-2022-38708 IBM Cognos Analytics server-side request forgery
2022-12-19 20:12:17
nessus
nessus
IBM Cognos Analytics Multiple Vulnerabilities (6841801)
2023-01-05 00:00:00
