IBM » Cognos Express : Security Vulnerabilities, CVEs,
IBM Cognos Express 9.0 before IFIX 2, 9.5 before IFIX 2, 10.1 before IFIX 2, and 10.2.1 before FP1 allows local users to obtain sensitive cleartext information by leveraging knowledge of a static decryption key.
Max CVSS
5.0
EPSS Score
0.13%
Published
2014-03-25
Updated
2017-08-29
The server in IBM Cognos Express 9.0 before IFIX 2, 9.5 before IFIX 2, 10.1 before IFIX 2, and 10.2.1 before FP1 allows remote attackers to read encrypted credentials via unspecified vectors.
Max CVSS
5.0
EPSS Score
0.20%
Published
2014-03-25
Updated
2017-08-29
Cross-site request forgery (CSRF) vulnerability in IBM Cognos Express 9.0 before IFIX 2, 9.5 before IFIX 2, 10.1 before IFIX 2, and 10.2.1 before FP1 allows remote attackers to hijack the authentication of arbitrary users.
Max CVSS
6.8
EPSS Score
0.09%
Published
2014-03-25
Updated
2017-08-29
CVE-2010-0557
Public exploit
IBM Cognos Express 9.0 allows attackers to obtain unspecified access to the Tomcat Manager component, and cause a denial of service, by leveraging hardcoded credentials.
Max CVSS
7.5
EPSS Score
0.62%
Published
2010-02-05
Updated
2010-02-08
4 vulnerabilities found