CVE-2022-43887: IBM Cognos Analytics

Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days.

IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could be vulnerable to sensitive information exposure by passing API keys to log files. If these keys contain sensitive information, it could lead to further attacks. IBM X-Force ID: 240450.

Affected products

• IBM Cognos Analytics: from 11.1.0, before 11.1.7 (fixed in 11.1.7); from 11.2.0, up to and including 11.2.3; version 11.1.7 only

Published 2022-12-19. Last modified 2026-06-17.