CVE-2022-43887

—

CVSS 3.1

5.3 medium

EPSS

<1%p43

Published

Dec 19, 2022 (Dec 19, 2022)

Modified

Jun 17, 2026

Description

IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could be vulnerable to sensitive information exposure by passing API keys to log files. If these keys contain sensitive information, it could lead to further attacks. IBM X-Force ID: 240450.

Vendors: ibm
Products: cognos analytics
Weakness: CWE-532
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.