CVE-2021-20464

IBM Cognos Analytics PowerPlay (IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7) could be vulnerable to an XML Bomb attack by a malicious authenticated user

Medium · published April 22, 2022

CVSS v3.0
6.5
EPSS
1%
Percentile
72.2
In the wild
Unconfirmed
What it is

IBM Cognos Analytics PowerPlay (IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7) could be vulnerable to an XML Bomb attack by a malicious authenticated user. IBM X-Force ID: 196813.

The record
Technical detail
CVSS v3.0
6.5 · MEDIUM
Vector
CVSS:3.0/C:N/AC:L/S:U/A:H/UI:N/AV:N/PR:L/I:N/E:U/RC:C/RL:O
CVSS v4.0
Not supplied
EPSS
0.01398 · 72.2th percentile
Published
2022-04-22T16:30Z
EPSS history
Timeline
  • 22 APR 16:30Z
    IBM Cognos Analytics PowerPlay (IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7) could be vulnerable to an XML Bomb attack by a malicious authenticated user
    cvelistv5