What’s Vulnerable › Vulnerabilities
CVE-2025-36076: IBM Cognos Analytics versions 12.0.4 and 12.1.3 is affected by security vulnerabilities
- Severity: medium (CVSS 4.3 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-09-18 · updated 2026-10-14
- Weakness: CWE-540
Description
IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 stores sensitive information in source code could be used by an authenticated user in further attacks against the system.
Affected products
- IBM Cognos Analytics: from 12.1.0 through 12.1.3 FP1; from 12.0.4 through 12.0.4 FP2
References
Get alerted when CVE-2025-36076 or the next vulnerability affects your stack