CVE-2024-40703

—

CVSS 3.1

5.5 medium

EPSS

<1%p4

Published

Sep 22, 2024 (Sep 22, 2024)

Modified

Jun 17, 2026

Description

IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, 12.0.2, 12.0.3, and IBM Cognos Analytics Reports for iOS 11.0.0.7 could allow a local attacker to obtain sensitive information in the form of an API key. An attacker could use this information to launch further attacks against affected applications.

Vendors: ibm
Products: cognos analytics, cognos analytics reports
Weakness: CWE-522
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.1%)

In the news0 stories

No ingested article mentions this CVE yet.