Vulnerability Database

309,136

Total vulnerabilities in the database

CVE-2024-25047

IBM Cognos Analytics 11.2.0 through 11.2.4 and 12.0.0 through 12.0.2 is vulnerable to injection attacks in application logging by not sanitizing user provided data. This could lead to further attacks against the system. IBM X-Force ID: 282956.

  • Published: May 2, 2024
  • Updated: Nov 16, 2025
  • CVE: CVE-2024-25047
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 8.6
  • AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

CWEs:

Software From Fixed in
ibm / cognos_analytics 11.2.4-fixpack1 11.2.4-fixpack1.x
ibm / cognos_analytics 11.2.4 11.2.4.x
ibm / cognos_analytics 11.2.0 11.2.4
ibm / cognos_analytics 12.0.0 12.0.3
ibm / cognos_analytics 11.2.4-fixpack2 11.2.4-fixpack2.x