Vulnerabilities (CVE)

Filtered by vendor Ibm Subscribe
Filtered by product Cognos Express
Total 4 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2013-5444 1 Ibm 1 Cognos Express 2023-12-10 5.0 MEDIUM N/A
The server in IBM Cognos Express 9.0 before IFIX 2, 9.5 before IFIX 2, 10.1 before IFIX 2, and 10.2.1 before FP1 allows remote attackers to read encrypted credentials via unspecified vectors.
CVE-2013-5443 1 Ibm 1 Cognos Express 2023-12-10 6.8 MEDIUM N/A
Cross-site request forgery (CSRF) vulnerability in IBM Cognos Express 9.0 before IFIX 2, 9.5 before IFIX 2, 10.1 before IFIX 2, and 10.2.1 before FP1 allows remote attackers to hijack the authentication of arbitrary users.
CVE-2013-5445 1 Ibm 1 Cognos Express 2023-12-10 5.0 MEDIUM N/A
IBM Cognos Express 9.0 before IFIX 2, 9.5 before IFIX 2, 10.1 before IFIX 2, and 10.2.1 before FP1 allows local users to obtain sensitive cleartext information by leveraging knowledge of a static decryption key.
CVE-2010-0557 1 Ibm 1 Cognos Express 2023-12-10 7.5 HIGH N/A
IBM Cognos Express 9.0 allows attackers to obtain unspecified access to the Tomcat Manager component, and cause a denial of service, by leveraging hardcoded credentials.