What’s Vulnerable › Vulnerabilities
CVE-2025-0923: IBM Cognos Analytics information disclosure
- Severity: medium (CVSS 5.3 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-06-11 · updated 2026-06-17
- Weakness: CWE-540
Description
IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, 12.0.2, 12.0.3, and 12.0.4 stores source code on the web server that could aid in further attacks against the system.
Affected products
- IBM Cognos Analytics: from 11.2.0 through 11.2.4; from 12.0.0 through 12.0.4; 11.2.4-fixpack1, 11.2.4-fixpack2, 11.2.4-fixpack3
References
Get alerted when CVE-2025-0923 or the next vulnerability affects your stack