CVE-2021-29679

IBM Cognos Analytics 11.1.7 and 11.2.0 could allow an authenticated user to execute code remotely due to incorrectly neutralizaing user-contrlled input that…

High · published October 15, 2021

CVSS v3.0
8.8
EPSS
2%
Percentile
80.6
In the wild
Unconfirmed
What it is

IBM Cognos Analytics 11.1.7 and 11.2.0 could allow an authenticated user to execute code remotely due to incorrectly neutralizaing user-contrlled input that could be interpreted a a server-side include (SSI) directive. IBM X-Force ID: 199915.

The record
Technical detail
CVSS v3.0
8.8 · HIGH
Vector
CVSS:3.0/PR:L/AV:N/S:U/A:H/UI:N/I:H/AC:L/C:H/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.02000 · 80.6th percentile
Published
2021-10-15T15:55Z
EPSS history
Timeline
  • 15 OCT 15:55Z
    IBM Cognos Analytics 11.1.7 and 11.2.0 could allow an authenticated user to execute code remotely due to incorrectly neutralizaing user-contrlled input that…
    cvelistv5