high7.8
CVE-2020-4302
IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to execute arbitrary code on the system, caused by a CSV injection.
Impact
IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to execute arbitrary code on the system, caused by a CSV injection. By persuading a victim to open a specially-crafted excel file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 176610.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Cognos Analytics | from 11.0.0 before 11.0.13 from 11.1.0 through 11.1.7 Version 11.0.13 |