CVE-2023-32344CWE-352

IBM Cognos Analytics cross-site request forgery

Medium · published February 24, 2024

CVSS v3.1
4.3
EPSS
0%
Percentile
30.8
In the wild
Unconfirmed
What it is

IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 is vulnerable to form action hijacking where it is possible to modify the form action to reference an arbitrary path. IBM X-Force ID: 255898.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00380 · 30.8th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2024-02-24T15:29Z
EPSS history
Timeline
  • 24 FEB 15:29Z
    IBM Cognos Analytics cross-site request forgery
    cvelistv5