CVE-2024-25047CWE-117

IBM Cognos Analytics log injection

High · published May 2, 2024

CVSS v3.1
8.6
EPSS
1%
Percentile
50.2
In the wild
Unconfirmed
What it is

IBM Cognos Analytics 11.2.0 through 11.2.4 and 12.0.0 through 12.0.2 is vulnerable to injection attacks in application logging by not sanitizing user provided data. This could lead to further attacks against the system. IBM X-Force ID: 282956.

The record
Technical detail
CVSS v3.1
8.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00643 · 50.2th percentile
Weakness
CWE-117 · Improper Output Neutralization for Logs
Published
2024-05-02T20:09Z
EPSS history
Timeline
  • 02 MAY 20:09Z
    IBM Cognos Analytics log injection
    cvelistv5