Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-40695

IBM Cognos Analytics 11.2.0 through 11.2.4 FP4 and 12.0.0 through 12.0.4 could be vulnerable to malicious file upload by not validating the content of the file uploaded to the web interface. Attackers can make use of this weakness and upload malicious executable files into the system, and it can be sent to victim for performing further attacks.

Published

2024-12-20T14:15:24.063

Last Modified

2025-07-02T15:53:18.627

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 8.0 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-434
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application ibm cognos_analytics < 11.2.4 Yes
Application ibm cognos_analytics < 12.0.4 Yes
Application ibm cognos_analytics 11.2.4 Yes
Application ibm cognos_analytics 11.2.4 Yes
Application ibm cognos_analytics 11.2.4 Yes
Application ibm cognos_analytics 11.2.4 Yes
Application ibm cognos_analytics 11.2.4 Yes
Application ibm cognos_analytics 12.0.4 Yes
References