CVE-2023-35011
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk30th percentile - higher than 30% of all known CVEs
Summary
IBM Cognos Analytics versions 11.1.7, 11.2.0, and 11.2.1 are vulnerable to server-side request forgery (SSRF). This allows an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.
Risk Assessment
The risk to the organization includes the potential for unauthorized access to network resources, which could lead to serious security breaches.
Recommendation
It is recommended to update IBM Cognos Analytics to the latest version to mitigate this vulnerability and to monitor the system for potential attacks.
Original NVD description (English source)
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 257705.