IBM Cognos Dashboards On Cloud Pak For Data vulnerabilities

4 CVEs affecting IBM Cognos Dashboards On Cloud Pak For Data, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-41739, published 2025-01-24.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-38735, published 2023-10-22. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. IBM Cognos Dashboards on Cloud Pak for Data 4.7.0 could allow a remote attacker to bypass security restrictions, caused by a reverse tabnabbing flaw. An attacker could exploit this vulnerability and…
CVE-2024-41739, published 2025-01-24. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. IBM Cognos Dashboards 4.0.7 and 5.0.0 on Cloud Pak for Data could allow a remote attacker to perform unauthorized actions due to dependency confusion.
CVE-2023-38276, published 2023-10-22. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. IBM Cognos Dashboards on Cloud Pak for Data 4.7.0 exposes sensitive information in environment variables which could aid in further attacks against the system. IBM X-Force ID: 260736.
CVE-2023-38275, published 2023-10-22. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. IBM Cognos Dashboards on Cloud Pak for Data 4.7.0 exposes sensitive information in container images which could lead to further attacks against the system. IBM X-Force ID: 260730.