medium4.3
CVE-2023-32344
IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 is vulnerable to form action hijacking where it is possible to modify the form action to reference an arbitrary…
Impact
IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 is vulnerable to form action hijacking where it is possible to modify the form action to reference an arbitrary path. IBM X-Force ID: 255898.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netapp | Oncommand Insight | All versions |
| Ibm | Cognos Analytics | from 11.1.1 before 11.1.7 from 11.2.0 before 11.2.4 Versions 11.1.7, 11.2.4, 12.0.0, 12.0.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://exchange.xforce.ibmcloud.com/vulnerabilities/255898
- https://security.netapp.com/advisory/ntap-20240405-0002/
- https://security.netapp.com/advisory/ntap-20240621-0006/
- https://www.ibm.com/support/pages/node/7123154
- https://exchange.xforce.ibmcloud.com/vulnerabilities/255898
- https://security.netapp.com/advisory/ntap-20240405-0002/
- https://security.netapp.com/advisory/ntap-20240621-0006/
- https://www.ibm.com/support/pages/node/7123154