What’s Vulnerable › Products

IBM Cognos Analytics vulnerabilities

109 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 20 published in the last 12 months.

Check whether your IBM Cognos Analytics version is affected

Latest IBM Cognos Analytics vulnerabilities

• CVE-2025-36076 — IBM Cognos Analytics versions 12.0.4 and 12.1.3 is affected by security vulnerabilities (CVSS 4.3)
• CVE-2025-33147 — IBM Cognos Analytics versions 12.0.4 and 12.1.3 is affected by security vulnerabilities (CVSS 5.9)
• CVE-2024-56344 — IBM Cognos Analytics 12.0.4 and 12.1.3 versions are affected by security vulnerabilities (CVSS 5.9)
• CVE-2026-7884 — IBM Cognos Analytics versions 12.0.4 and 12.1.3 is affected by security vulnerabilities (CVSS 5.4)
• CVE-2026-15995 — IBM Cognos Analytics 12.1.3 general availability package contains a data integrity issue in the Agentic AI assistant that may cause incorrect report summaries or report-processing errors under concurrent use (CVSS 4.2)
• CVE-2025-3633 — IBM Cognos Analytics is affected by multiple security vulnerabilities (CVSS 8.2)
• CVE-2025-36126 — IBM Cognos Analytics is affected by Cross-site scripting. (CVSS 7.6)
• CVE-2024-52900 — IBM Cognos Analytics cross-site scripting (CVSS 5.4)
• CVE-2025-25032 — IBM Cognos Analytics denial of service (CVSS 7.5)
• CVE-2025-0923 — IBM Cognos Analytics information disclosure (CVSS 5.3)
• CVE-2025-0917 — IBM Cognos Analytics cross-site scripting (CVSS 4.8)
• CVE-2025-0823 — IBM MQ path traversal (CVSS 6.5)
• CVE-2024-56340 — IBM Cognos Analytics path traversal (CVSS 6.5)
• CVE-2024-49352 — IBM Cognos Anaytics XML external entity injection (CVSS 7.1)
• CVE-2023-38009 — IBM Cognos Analytics Mobile information disclosure (CVSS 5.9)
• CVE-2024-51466 — IBM Cognos Analytics expression language injection (CVSS 9.0)
• CVE-2024-40695 — IBM Cognos Analytics file upload (CVSS 8.0)
• CVE-2024-45082 — IBM Cognos Analytics HTTP open redirection (CVSS 5.2)
• CVE-2024-41752 — IBM Cognos Analytics HTML injection (CVSS 6.1)
• CVE-2024-25042 — IBM Cognos Analytics cross-site scripting (CVSS 6.1)
• CVE-2024-40703 — IBM Cognos Analytics information disclosure (CVSS 5.5)
• CVE-2024-25053 — IBM Cognos Analytics improper certificate validation (CVSS 5.9)
• CVE-2024-25041 — IBM Cognos Analytics cross-site scripting (CVSS 5.4)
• CVE-2024-25047 — IBM Cognos Analytics log injection (CVSS 8.6)
• CVE-2023-43051 — IBM Cognos Analytics cross-site scripting (CVSS 5.4)