CVE-2024-52900
28.06.2025, 01:15
IBM Cognos Analytics 11.2.0 through 12.2.4 Fix Pack 5 and 12.0.0 through 12.0.4 is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
| Vendor | Product | Version |
|---|---|---|
| ibm | cognos_analytics | 11.2.0 ≤ 𝑥 < 11.2.4 |
| ibm | cognos_analytics | 12.0.0 ≤ 𝑥 < 12.0.4 |
| ibm | cognos_analytics | 11.2.4 |
| ibm | cognos_analytics | 11.2.4:fixpack1 |
| ibm | cognos_analytics | 11.2.4:fixpack2 |
| ibm | cognos_analytics | 11.2.4:fixpack3 |
| ibm | cognos_analytics | 11.2.4:fixpack4 |
| ibm | cognos_analytics | 11.2.4:fixpack5 |
| ibm | cognos_analytics | 11.2.4:interim_fix_1 |
| ibm | cognos_analytics | 11.2.4:interim_fix_2 |
| ibm | cognos_analytics | 11.2.4:interim_fix_3 |
| ibm | cognos_analytics | 11.2.4:interim_fix_4 |
| ibm | cognos_analytics | 11.2.4:interim_fix_5 |
| ibm | cognos_analytics | 12.0.4 |
𝑥
= Vulnerable software versions