cve.bz

CVE-2024-25047

8.6 highEPSS 0.6%

High (8.6). EPSS 0.6% chance of exploitation in the next 30 days.

IBM Cognos Analytics 11.2.0 through 11.2.4 and 12.0.0 through 12.0.2 is vulnerable to injection attacks in application logging by not sanitizing user provided data. This could lead to further attacks against the system. IBM X-Force ID: 282956.

Severity

CVSS 3.1

8.6 high
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
EPSS
0.6% chance of exploitation in the next 30 days; higher than 50% of CVEs (scores of 2026-10-31)
CWE
CWE-117
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON