CVE-2021-20470

—

CVSS 3.1

7.5 high

EPSS

1%p70

Published

Dec 3, 2021 (Dec 3, 2021)

Modified

Jun 17, 2026

Description

IBM Cognos Analytics 11.1.7 and 11.2.0 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 196339.

Vendors: ibm netapp
Products: cognos analytics, oncommand insight
Weakness: CWE-521
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.4%)

In the news0 stories

No ingested article mentions this CVE yet.