CVE-2012-4847 — IBM Cognos Business Intelligence vulnerability

CWE-1893 documents3 sources

Severity

4.0MEDIUMNVD

EPSS

0.4%

top 41.79%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

IBM Cognos Business Intelligence

Timeline

PublishedNov 14

Latest updateMay 17

Description

IBM Cognos Business Intelligence (BI) 8.4 and 8.4.1 allows remote authenticated users to cause a denial of service (CPU consumption) via a crafted request containing a zero-valued byte.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 8.0 | Impact: 2.9

Affected Packages1 packages

▶NVDibm/cognos_business_intelligence8.4, 8.4.1+1

🔴Vulnerability Details

GHSA

GHSA-g97g-9m79-6c2x: IBM Cognos Business Intelligence (BI) 8↗2022-05-17

▶

CVEList

CVE-2012-4847: IBM Cognos Business Intelligence (BI) 8↗2012-11-14

▶