CVE-2013-5444
published 2014-03-25CVE-2013-5444: The server in IBM Cognos Express 9.0 before IFIX 2, 9.5 before IFIX 2, 10.1 before IFIX 2, and 10.2.1 before FP1 allows remote attackers to read encrypted…
PriorityP426medium5CVSS 2.0
AVNACLAuNCPINAN
EPSS
1.67%
73.8th percentile
The server in IBM Cognos Express 9.0 before IFIX 2, 9.5 before IFIX 2, 10.1 before IFIX 2, and 10.2.1 before FP1 allows remote attackers to read encrypted credentials via unspecified vectors.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | cognos_express | — | — |
| ibm | cognos_express | — | — |
| ibm | cognos_express | — | — |
| ibm | cognos_express | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
IBM Cognos Express up to 9.4 cryptographic issue (XFDB-87820 / BID-66362)
vuldb·2026-05-09·CVSS 5.0
CVE-2013-5444 [MEDIUM] IBM Cognos Express up to 9.4 cryptographic issue (XFDB-87820 / BID-66362)
A vulnerability was found in IBM Cognos Express up to 9.4 and classified as problematic. This vulnerability affects unknown code. Executing a manipulation can lead to cryptographic issues.
The identification of this vulnerability is CVE-2013-5444. The attack may be launched remotely. There is no exploit available.
It is suggested to upgrade the affected component.
GHSA
GHSA-j648-m8g6-h7mq: The server in IBM Cognos Express 9
ghsa_unreviewed·2022-05-17
CVE-2013-5444 [MEDIUM] GHSA-j648-m8g6-h7mq: The server in IBM Cognos Express 9
The server in IBM Cognos Express 9.0 before IFIX 2, 9.5 before IFIX 2, 10.1 before IFIX 2, and 10.2.1 before FP1 allows remote attackers to read encrypted credentials via unspecified vectors.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2014-03-25
Published