CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:P/A:N
EPSS
Percentile
82.5%
There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition that is used by IBM Cognos Express. These issues were disclosed as part of the IBM Java SDK updates in July 2014.
CVEID: CVE-2014-4263 DESCRIPTION: An unspecified vulnerability related to the Security component has partial confidentiality impact, partial integrity impact, and no availability impact.
CVSS Base Score: 4
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/94606 for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:N/AC:H/Au:N/C:P/I:P/A:N)
CVEID: CVE-2014-4244 DESCRIPTION: An unspecified vulnerability related to the Security component has partial confidentiality impact, partial integrity impact, and no availability impact.
CVSS Base Score: 4
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/94605 for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:N/AC:H/Au:N/C:P/I:P/A:N)
IBM Cognos Express 9.0
IBM Cognos Express 9.5
IBM Cognos Express 10.1
IBM Cognos Express 10.2.1
The recommended solution is to apply the fix in one of the IBM Cognos Express versions listed as soon as practical:
IBM Cognos Express 10.1 FP1
IBM Cognos Express 10.2.1 FP3
IBM Cognos Express 9.0 and 9.5 customers should upgrade to a more current version and apply the corresponding update. Please contact Customer Support with any questions.
None
Vendor | Product | Version | CPE |
---|---|---|---|
ibm | planning_analytics | 9.0 | cpe:2.3:a:ibm:planning_analytics:9.0:*:*:*:*:*:*:* |
ibm | planning_analytics | 9.5 | cpe:2.3:a:ibm:planning_analytics:9.5:*:*:*:*:*:*:* |
ibm | planning_analytics | 10.1 | cpe:2.3:a:ibm:planning_analytics:10.1:*:*:*:*:*:*:* |
ibm | planning_analytics | 10.2.1 | cpe:2.3:a:ibm:planning_analytics:10.2.1:*:*:*:*:*:*:* |