CVE-2022-34357CWE-770

IBM Cognos Analytics Mobile Server denial of service

Medium · published February 24, 2024

CVSS v3.1
6.5
EPSS
1%
Percentile
68.2
In the wild
Unconfirmed
What it is

IBM Cognos Analytics Mobile Server 11.1.7, 11.2.4, and 12.0.0 is vulnerable to Denial of Service due to due to weak or absence of rate limiting. By making unlimited http requests, it is possible for a single user to exhaust server resources over a period of time making service unavailable for other legitimate users. IBM X-Force ID: 230510.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01209 · 68.2th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2024-02-24T15:38Z
EPSS history
Timeline
  • 24 FEB 15:38Z
    IBM Cognos Analytics Mobile Server denial of service
    cvelistv5