CVE-2022-43883: IBM Cognos Analytics

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could be vulnerable to a Log Injection attack by constructing URLs from user-controlled data. This could enable attackers to make arbitrary requests to the internal network or to the local file system. IBM X-Force ID: 240266.

Affected products

• IBM Cognos Analytics: from 11.1.0, up to and including 11.1.7; from 11.2.0, up to and including 11.2.3; version 11.1.7 only

Published 2022-12-19. Last modified 2026-06-17.