CVE-2023-30996CWE-346

IBM Cognos Analytics cross-origin resource sharing

Medium · published February 24, 2024

CVSS v3.1
5.3
EPSS
0%
Percentile
35.5
In the wild
Unconfirmed
What it is

IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 could be vulnerable to information leakage due to unverified sources in messages sent between Windows objects of different origins. IBM X-Force ID: 254290.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00422 · 35.5th percentile
Weakness
CWE-346 · Origin Validation Error
Published
2024-02-24T15:35Z
EPSS history
Timeline
  • 24 FEB 15:35Z
    IBM Cognos Analytics cross-origin resource sharing
    cvelistv5