medium5.3
CVE-2023-28952
IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 is vulnerable to injection attacks in application logging by not sanitizing user provided data.
Impact
IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 is vulnerable to injection attacks in application logging by not sanitizing user provided data. IBM X-Force ID: 251463.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Cognos Controller | Versions 10.4.1, 10.4.2, 11.0.0 |