cbcvebase.
CVE-2024-25053
published 2024-06-28

CVE-2024-25053: IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, and 12.0.2 is vulnerable to improper certificate validation when using the IBM…

PriorityP431medium5.9CVSS 3.1
AVNACHPRNUINSUCNIHAN
EPSS
0.28%
20.2th percentile
IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, and 12.0.2 is vulnerable to improper certificate validation when using the IBM Planning Analytics Data Source Connection. This could allow an attacker to spoof a trusted entity by interfering in the communication path between IBM Planning Analytics server and IBM Cognos Analytics server. IBM X-Force ID: 283364.

Affected

9 ranges
VendorProductVersion rangeFixed in
ibmcognos_analytics——
ibmcognos_analytics——
ibmcognos_analytics——
ibmcognos_analytics——
ibmcognos_analytics——
ibmcognos_analytics——
ibmcognos_analytics——
ibmcognos_analytics——
ibmcognos_analytics——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.