CVSS 3.0
3.6 lowCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:NCVE-2018-1842
Low (3.6). EPSS 0.3% chance of exploitation in the next 30 days.
IBM Cognos Analytics 11 Configuration tool, under certain circumstances, will bypass OIDC namespace signature verification on its id_token. IBM X-Force ID: 150902.
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 18% of CVEs (scores of 2026-10-31)
- CWE
- CWE-347
- Published
- Modified
- Record from
- the NVD, synced
Affected
- ibm:cognos_analytics
- netapp:oncommand_insight