CVE-2025-33147: IBM Cognos Analytics

Medium severity, CVSS 5.9. EPSS: 0.2% chance of exploitation in the next 30 days.

IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 could allow an attacker on a shared network to obtain sensitive information caused by insecure network communication.

Affected products

• IBM Cognos Analytics: from 12.1.0, up to and including 12.1.3 FP1; from 12.0.4, up to and including 12.0.4 FP2

Published 2026-09-18. Last modified 2026-09-21.