IBM Cognos Express vulnerabilities

4 CVEs affecting IBM Cognos Express, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-5445, published 2014-03-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2010-0557, published 2010-02-05. High severity, CVSS 7.5. EPSS: 51.7% chance of exploitation in the next 30 days. IBM Cognos Express 9.0 allows attackers to obtain unspecified access to the Tomcat Manager component, and cause a denial of service, by leveraging hardcoded credentials.
CVE-2013-5444, published 2014-03-25. Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days. The server in IBM Cognos Express 9.0 before IFIX 2, 9.5 before IFIX 2, 10.1 before IFIX 2, and 10.2.1 before FP1 allows remote attackers to read encrypted credentials via unspecified vectors.
CVE-2013-5445, published 2014-03-25. Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days. IBM Cognos Express 9.0 before IFIX 2, 9.5 before IFIX 2, 10.1 before IFIX 2, and 10.2.1 before FP1 allows local users to obtain sensitive cleartext information by leveraging knowledge of a static…
CVE-2013-5443, published 2014-03-25. Medium severity, CVSS 6.8. EPSS: 0.8% chance of exploitation in the next 30 days. Cross-site request forgery (CSRF) vulnerability in IBM Cognos Express 9.0 before IFIX 2, 9.5 before IFIX 2, 10.1 before IFIX 2, and 10.2.1 before FP1 allows remote attackers to hijack the…