CVE-2024-45082CWE-601

IBM Cognos Analytics HTTP open redirection

Medium · published December 18, 2024

CVSS v3.1
6.8
EPSS
0%
Percentile
14.4
In the wild
Unconfirmed
What it is

IBM Cognos Analytics 11.2.0 through 11.2.4 and 12.0.0 through 12.0.3

could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted.

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00241 · 14.4th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2024-12-18T16:15Z
EPSS history
Timeline
  • 18 DEC 16:15Z
    IBM Cognos Analytics HTTP open redirection
    cvelistv5