IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 is vulnerable to form action hijacking where it is possible to modify the form action to reference an arbitrary path. IBM X-Force ID: 255898.
History

Tue, 17 Dec 2024 19:15:00 +0000

Type Values Removed Values Added
First Time appeared Ibm
Ibm cognos Analytics
Netapp
Netapp oncommand Insight
CPEs cpe:2.3:a:ibm:cognos_analytics:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:cognos_analytics:11.1.7:-:*:*:*:*:*:*
cpe:2.3:a:ibm:cognos_analytics:11.1.7:fixpack1:*:*:*:*:*:*
cpe:2.3:a:ibm:cognos_analytics:11.1.7:fixpack2:*:*:*:*:*:*
cpe:2.3:a:ibm:cognos_analytics:11.1.7:fixpack3:*:*:*:*:*:*
cpe:2.3:a:ibm:cognos_analytics:11.1.7:fixpack4:*:*:*:*:*:*
cpe:2.3:a:ibm:cognos_analytics:11.1.7:fixpack5:*:*:*:*:*:*
cpe:2.3:a:ibm:cognos_analytics:11.1.7:fixpack6:*:*:*:*:*:*
cpe:2.3:a:ibm:cognos_analytics:11.1.7:fixpack7:*:*:*:*:*:*
cpe:2.3:a:ibm:cognos_analytics:11.2.4:-:*:*:*:*:*:*
cpe:2.3:a:ibm:cognos_analytics:11.2.4:fixpack1:*:*:*:*:*:*
cpe:2.3:a:ibm:cognos_analytics:11.2.4:fixpack2:*:*:*:*:*:*
cpe:2.3:a:ibm:cognos_analytics:12.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:cognos_analytics:12.0.1:*:*:*:*:*:*:*
cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*
Vendors & Products Ibm
Ibm cognos Analytics
Netapp
Netapp oncommand Insight

cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published: 2024-02-24T15:29:33.526Z

Updated: 2024-08-02T15:10:24.890Z

Reserved: 2023-05-08T18:32:52.655Z

Link: CVE-2023-32344

cve-icon Vulnrichment

Updated: 2024-07-05T15:20:40.857Z

cve-icon NVD

Status : Analyzed

Published: 2024-02-26T16:27:46.313

Modified: 2024-12-17T18:55:38.543

Link: CVE-2023-32344

cve-icon Redhat

No data.