CVE-2024-25042: IBM Cognos Analytics cross-site scripting
IBM Cognos Analytics 11.2.0 through 11.2.4 and 12.0.0 through 12.0.3
is potentially vulnerable to Cross Site Scripting (XSS). A remote attacker could execute malicious commands due to improper validation of column headings in Cognos Explorations.
Other sources
IBM Cognos Analytics is potentially vulnerable to Cross Site Scripting (XSS). A remote attacker could execute malicious commands due to improper validation of column headings in Cognos Explorations.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-25042?
CVE-2024-25042 has been classified with a medium severity level due to its potential for exploitation via Cross Site Scripting (XSS).
How do I fix CVE-2024-25042?
You can fix CVE-2024-25042 by applying the latest patches provided by IBM for Cognos Analytics versions 11.2.0 through 11.2.4 and 12.0.0 through 12.0.3.
What versions of IBM Cognos Analytics are affected by CVE-2024-25042?
CVE-2024-25042 affects IBM Cognos Analytics versions 11.2.0 to 11.2.4 and 12.0.0 to 12.0.3.
What kind of vulnerability is CVE-2024-25042?
CVE-2024-25042 is a Cross Site Scripting (XSS) vulnerability that could allow remote attackers to execute malicious commands.
Who can be impacted by CVE-2024-25042?
Users and organizations utilizing vulnerable versions of IBM Cognos Analytics may be impacted by CVE-2024-25042.