CVE-2024-25047

Name of the Vulnerable Software and Affected Versions IBM Cognos Analytics versions 11.2.0 through 11.2.4 IBM Cognos Analytics versions 12.0.0 through 12.0.2

Description The issue is related to injection attacks in application logging due to the lack of sanitization of user-provided data. This could lead to further attacks against the system.

Recommendations For IBM Cognos Analytics versions 11.2.0 through 11.2.4, upgrade to a patched version to address improper output handling. For IBM Cognos Analytics versions 12.0.0 through 12.0.2, upgrade to a patched version to address improper output handling. As a temporary workaround, consider auditing logs for suspicious activity to minimize the risk of exploitation.