Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Cognos Analytics — Vulnerabilities & Security Advisories 101

All 101 CVE vulnerabilities found in Cognos Analytics, with AI-generated Chinese analysis, references, and POCs.

This page provides a comprehensive aggregation of known vulnerabilities for IBM Cognos Analytics, a business intelligence and reporting platform. It focuses on the Common Weakness Enumeration (CWE) classifications associated with this specific software product. The collection includes security flaws spanning from the initial release of Cognos Analytics through recent updates, ensuring a historical perspective on product security. This resource covers a wide range of vulnerability types, including buffer overflows, cross-site scripting, injection flaws, and improper access control issues. Readers can utilize this page to track IBM’s security advisories regarding Cognos Analytics, gaining insight into how the vendor identifies and remediates specific flaws. Users can also examine detailed information about particular weakness classes to understand their technical nature and potential impact on enterprise environments. Furthermore, the page allows for the lookup of a product’s vulnerability history, enabling security teams to assess the evolution of security risks over time. By consolidating these data points, the page serves as a central reference for understanding the security posture of Cognos Analytics. This aids in risk assessment, patch management, and compliance monitoring for organizations relying on this business intelligence solution. The structured presentation of these vulnerabilities helps stakeholders identify patterns and prioritize mitigation efforts effectively without navigating disparate vendor sources.

Vendor: IBM Corporation

CVE IDTitleCVSSSeverityPublished
CVE-2026-15995 IBM Cognos Analytics 12.1.3 general availability package contains a data integrity issue in the Agentic AI assistant that may cause incorrect report summaries or report-processing errors under concurrent use CWE-362 5.4 Medium2026-07-17
CVE-2025-3633 IBM Cognos Analytics is affected by multiple security vulnerabilities CWE-79 5.4 Medium2026-05-27
CVE-2025-36126 IBM Cognos Analytics is affected by Cross-site scripting. CWE-79 6.4 Medium2026-05-26
CVE-2024-52900 IBM Cognos Analytics cross-site scripting CWE-79 6.4 Medium2025-06-28
CVE-2025-0923 IBM Cognos Analytics information disclosure CWE-540 5.3 Medium2025-06-11
CVE-2025-0917 IBM Cognos Analytics cross-site scripting CWE-79 5.5 Medium2025-06-11
CVE-2025-25032 IBM Cognos Analytics denial of service CWE-770 7.5 High2025-06-11
CVE-2024-56340 IBM Cognos Analytics path traversal CWE-23 6.5 Medium2025-02-28
CVE-2025-0823 IBM MQ path traversal CWE-22 6.5 Medium2025-02-28
CVE-2024-49352 IBM Cognos Anaytics XML external entity injection CWE-611 7.1 High2025-02-05
CVE-2024-40695 IBM Cognos Analytics file upload CWE-434 8.0 High2024-12-20
CVE-2024-51466 IBM Cognos Analytics expression language injection CWE-917 9.0 Critical2024-12-20
CVE-2024-25042 IBM Cognos Analytics cross-site scripting CWE-79 5.4 Medium2024-12-18
CVE-2024-45082 IBM Cognos Analytics HTTP open redirection CWE-601 6.8 Medium2024-12-18
CVE-2024-41752 IBM Cognos Analytics HTML injection CWE-80 5.4 Medium2024-12-18
CVE-2024-40703 IBM Cognos Analytics information disclosure CWE-522 5.5 Medium2024-09-22
CVE-2024-25041 IBM Cognos Analytics cross-site scripting CWE-79 5.4 Medium2024-06-28
CVE-2024-25053 IBM Cognos Analytics improper certificate validation CWE-295 5.9 Medium2024-06-28
CVE-2024-25047 IBM Cognos Analytics log injection CWE-117 8.6 High2024-05-02
CVE-2023-43051 IBM Cognos Analytics cross-site scripting CWE-79 5.4 Medium2024-02-24
CVE-2022-34357 IBM Cognos Analytics Mobile Server denial of service CWE-770 6.5 Medium2024-02-24
CVE-2023-30996 IBM Cognos Analytics cross-origin resource sharing CWE-346 5.3 Medium2024-02-24
CVE-2023-32344 IBM Cognos Analytics cross-site request forgery CWE-352 4.3 Medium2024-02-24
CVE-2023-38359 IBM Cognos Analytics cross-site scripting CWE-79 6.1 Medium2024-02-24
CVE-2023-35011 IBM Cognos Analytics server-side request forgey CWE-918 5.4 Medium2023-08-16
CVE-2023-35009 IBM Cognos Analytics information disclosure CWE-209 5.3 Medium2023-08-16
CVE-2023-28530 IBM Cognos Analytics cross-site scripting CWE-79 5.4 Medium2023-07-22
CVE-2023-25929 IBM Cognos Analytics cross-site scripting CWE-79 4.6 Medium2023-07-22
CVE-2021-39036 IBM Cognos Analytics cross-site scripting CWE-79 6.1 Medium2023-05-12
CVE-2022-39160 IBM Cognos Analytics cross-site scripting CWE-79 6.1 Medium2022-12-19

All 101 known CVE vulnerabilities affecting Cognos Analytics with full Chinese analysis, references, and POCs where available.