CVE-2021-20464: Medium severity ibm cognos analytics vulnerability

Published Apr 22, 2022

Updated

IBM Cognos Analytics PowerPlay (IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7) could be vulnerable to an XML Bomb attack by a malicious authenticated user. IBM X-Force ID: 196813.

Other sources

IBM Cognos Analytics PowerPlay could be vulnerable to an XML Bomb attack by a malicious authenticated user.

Affected Software

4 affected components

IBM Cognos Analytics=11.1.7

IBM Cognos Analytics=11.2.0

IBM Cognos Analytics=11.2.1

NetApp OnCommand Insight

Remediation

Patch Available

https://www.ibm.com/support/pages/node/6570957

Event History

Apr 22, 2022

CVE Published

via MITRE·04:30 PM

Data Sourced

via MITRE·04:30 PM

DescriptionSeverityWeakness

Aug 3, 2024

Data Sourced

via IBM·05:47 PM

DescriptionSeverityAffected Software

Parent advisories

This vulnerability appears in the following advisories.

IBM-6570957

Frequently Asked Questions

What is the vulnerability ID of the vulnerability?

The vulnerability ID is CVE-2021-20464.

What is the title of the vulnerability?

The title of the vulnerability is 'IBM Cognos Analytics PowerPlay could be vulnerable to an XML Bomb attack by a malicious authenticated user.'

What is the description of the vulnerability?

The description of the vulnerability is that IBM Cognos Analytics PowerPlay could be vulnerable to an XML Bomb attack by a malicious authenticated user.

What is the severity of the vulnerability?

The severity of the vulnerability is medium with a severity value of 6.5.

Is there any reference for the vulnerability?

Yes, there is a reference available at https://exchange.xforce.ibmcloud.com/vulnerabilities/196813.