CVE-2022-30614

IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to a denial of service via email flooding caused by sending a specially-crafted request

Medium · published September 1, 2022

CVSS v3.0
6.5
EPSS
2%
Percentile
77.4
In the wild
Unconfirmed
What it is

IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to a denial of service via email flooding caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume all available CPU resources. IBM X-Force ID: 227591.

The record
Technical detail
CVSS v3.0
6.5 · MEDIUM
Vector
CVSS:3.0/C:N/AV:N/AC:L/I:N/S:U/UI:N/A:H/PR:L/RC:C/E:U/RL:O
CVSS v4.0
Not supplied
EPSS
0.01731 · 77.4th percentile
Published
2022-09-01T19:00Z
EPSS history
Timeline
  • 01 SEP 19:00Z
    IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to a denial of service via email flooding caused by sending a specially-crafted request
    cvelistv5