CVE-2024-56340

6.5 mediumEPSS 0.8%

Medium (6.5) in ibm cognos analytics. EPSS 0.8% chance of exploitation in the next 30 days.

IBM Cognos Analytics 11.2.0 through 11.2.4 FP5 is vulnerable to local file inclusion vulnerability, allowing an attacker to access sensitive files by inserting path traversal payloads inside the deficon parameter.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 57% of CVEs (scores of 2026-10-31)
CWE: CWE-23
Published: 2025-02-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:cognos_analytics

References

https://www.ibm.com/support/pages/node/7183676
https://github.com/MarioTesoro/vulnerability-research/tree/main/CVE-2024-56340

Check your stack JSON