IBM Cognos Analytics Multiple OSS Vulnerabilities and Patch Details (CVE List)

Vulnerability Overview IBM Cognos Analytics is affected by multiple security vulnerabilities involving several open-source software (OSS) components. Below are the details of the key vulnerabilities: Affected Scope CVE-2025-27516: Affects the Jinja template engine used by IBM Cognos Analytics. CVE-2025-50059: Affects Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. CVE-2025-50106: Affects Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. CVE-2025-30749: Affects Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. CVE-2025-30761: Affects Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. CVE-2025-30754: Affects Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. CVE-2025-30167: Affects Jupyter Core version 5.8.0 and earlier. CVE-2024-56339: Affects IBM WebSphere Application Server 9.0 and WebSphere Application Server Liberty versions 17.0.0.3 to 25.0.0.7. CVE-2025-48976: Affects Apache Commons FileUpload versions 1.0 to 1.6 and 2.0.0-M1 to 2.0.0-M4. CVE-2025-3633: Affects IBM Cognos Analytics. CVE-2025-53057: Affects Java SE. CVE-2025-53066: Affects Java SE. CVE-2024-12798: Affects JaninoEventEvaluator versions 0.1 to 1.3.14 and 1.4.0 to 1.5.12. CVE-2024-12801: Affects SaxEventRecorder versions 0.1 to 1.3.14 and 1.4.0 to 1.5.12. CVE-2025-36126: Affects IBM Cognos Analytics. CVE-2024-6844: Affects corydolphin/flask-cors version 4.0.1. CVE-2024-6839: Affects corydolphin/flask-cors version 4.0.1. CVE-2024-6866: Affects corydolphin/flask-cors version 4.0.1. CVE-2025-6020: Affects linux-pam. CVE-2025-21587: Affects Java SE. CVE-2025-30698: Affects Java SE. Remediation CVE-2025-27516: Upgrade to Jinja version 3.1.6 or later. CVE-2025-50059: Upgrade to Oracle Java SE 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1 or Oracle GraalVM for JDK 17.0.15, 21.0.7, and 24.0.1; Oracle GraalVM Enterprise Edition 21.3.14. CVE-2025-50106: Upgrade to Oracle Java SE 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1 or Oracle GraalVM for JDK 17.0.15, 21.0.7, and 24.0.1; Oracle GraalVM Enterprise Edition 21.3.14. CVE-2025-30749: Upgrade to Oracle Java SE 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1 or Oracle GraalVM for JDK 17.0.15, 21.0.7, and 24.0.1; Oracle GraalVM Enterprise Edition 21.3.14. CVE-2025-30761: Upgrade to Oracle Java SE 8u451, 8u451-perf, and 11.0.27; Oracle GraalVM Enterprise Edition 21.3.14. CVE-2025-30754: Upgrade to Oracle Java SE 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1 or Oracle GraalVM for JDK 17.0.15, 21.0.7, and 24.0.1; Oracle GraalVM Enterprise Edition 21.3.14. CVE-2025-30167: Upgrade to Jupyter Core version 5.8.0 or later. CVE-2024-56339: Upgrade to IBM WebSphere Application Server 9.0 and WebSphere Application Server Liberty version 25.0.0.8 or later. CVE-2025-48976: Upgrade to Apache Commons FileUpload version 1.6 or 2.0.0-M4 or later. CVE-2025-3633: Upgrade to the latest version of IBM Cognos Analytics. CVE-2025-53057: Upgrade to the latest version of Java SE. CVE-2025-53066: Upgrade to the latest version of Java SE. CVE-2024-12798: Upgrade to JaninoEventEvaluator version 1.5.13 or later. CVE-2024-12801: Upgrade to SaxEventRecorder version 1.5.13 or later. CVE-2025-36126: Upgrade to the latest version of IBM Cognos Analytics. CVE-2024-6844: Upgrade to corydolphin/flask-cors version 4.0.2 or later. CVE-2024-6839: Upgrade to corydolphin/flask-cors version 4.0.2 or later. CVE-2024-6866: Upgrade to corydolphin/flask-cors version 4.0.2 or later. CVE-2025-6020: Upgrade to the latest version of linux-pam. CVE-2025-21587: Upgrade to the latest version of Java SE. CVE-2025-30698: Upgrade to the latest version of Java SE. POC Code or Exploit Code The page does not contain specific POC code or exploit code.

Goal Reached Thanks to every supporter — we hit 100%!

IBM Cognos Analytics Multiple OSS Vulnerabilities and Patch Details (CVE List)

More from this source