CVE-2024-25047

—

CVSS 3.1

8.6 high

EPSS

<1%p49

Published

May 2, 2024 (May 2, 2024)

Modified

Jun 17, 2026

Description

IBM Cognos Analytics 11.2.0 through 11.2.4 and 12.0.0 through 12.0.2 is vulnerable to injection attacks in application logging by not sanitizing user provided data. This could lead to further attacks against the system. IBM X-Force ID: 282956.

Vendors: ibm netapp
Products: cognos analytics, oncommand insight
Weakness: CWE-117
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.