IBM Cognos Disclosure Management vulnerabilities

3 CVEs affecting IBM Cognos Disclosure Management, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-6077, published 2017-02-15.

More from IBM.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2013-0501, published 2013-04-12. High severity, CVSS 9.3. EPSS: 1.5% chance of exploitation in the next 30 days. The EdrawSoft EDOFFICE.EDOfficeCtrl.1 ActiveX control, as used in Edraw Office Viewer Component, the client in IBM Cognos Disclosure Management (CDM) 10.2.0, and other products, allows remote…
• CVE-2015-5014, published 2015-10-26. High severity, CVSS 9.3. EPSS: 1.5% chance of exploitation in the next 30 days. IBM Cognos Disclosure Management (CDM) 10.1.x and 10.2.x before 10.2.4 IF10 allows man-in-the-middle attackers to obtain access by spoofing an executable file during a client upload operation.
• CVE-2016-6077, published 2017-02-15. Medium severity, CVSS 5.3. EPSS: 0.7% chance of exploitation in the next 30 days. IBM Cognos Disclosure Management 10.2 could allow a malicious attacker to execute commands as a lower privileged user that opens a malicious document. IBM Reference #: 1991584.