2 lines
6.5 KiB
JSON
2 lines
6.5 KiB
JSON
{"affected":[{"affectedData":[{"cpes":["cpe:2.3:a:ibm:cognos_analytics:11.2.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:cognos_analytics:12.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:cognos_analytics:12.0.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:cognos_analytics:12.1.0:*:*:*:*:*:*:*"],"product":"Cognos Analytics","vendor":"IBM","versions":[{"status":"affected","version":"11.2.0"},{"status":"affected","version":"12.0"},{"status":"affected","version":"12.1.0"}]},{"cpes":["cpe:2.3:a:ibm:cognos_transformer:12.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:cognos_transformer:12.0.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:cognos_transformer:11.2.4:*:*:*:*:*:*:*","cpe:2.3:a:ibm:cognos_transformer:12.1.0:*:*:*:*:*:*:*"],"product":"Cognos Transformer","vendor":"IBM","versions":[{"status":"affected","version":"12.0"},{"status":"affected","version":"11.2.4"},{"status":"affected","version":"12.1.0"}]}],"source":"psirt@us.ibm.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:ibm:cognos_analytics:*:*:*:*:*:*:*:*","matchCriteriaId":"FA7F561D-2D45-4BDB-AE84-1BD057DC9930","versionEndExcluding":"11.2.4","versionStartIncluding":"11.2.0","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:cognos_analytics:*:*:*:*:*:*:*:*","matchCriteriaId":"90D7AA5F-889B-4FC6-AE9D-9659FCAC13FF","versionEndExcluding":"12.0.4","versionStartIncluding":"12.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:cognos_analytics:*:*:*:*:*:*:*:*","matchCriteriaId":"30BF0C71-FEDA-4D86-BE94-54D67AA482BA","versionEndExcluding":"12.1.2","versionStartIncluding":"12.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:cognos_analytics:11.2.4:-:*:*:*:*:*:*","matchCriteriaId":"A1D81212-AFFE-4A73-AAC1-E558973FC452","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:cognos_analytics:11.2.4:fixpack1:*:*:*:*:*:*","matchCriteriaId":"07DC144D-62FC-4808-A77A-642871C1F8FC","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:cognos_analytics:11.2.4:fixpack2:*:*:*:*:*:*","matchCriteriaId":"2A61B920-B490-48A8-BF00-13B8854683FD","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:cognos_analytics:11.2.4:fixpack3:*:*:*:*:*:*","matchCriteriaId":"1F65BC6D-9A9D-45B9-919B-2855586C4F1B","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:cognos_analytics:11.2.4:fixpack4:*:*:*:*:*:*","matchCriteriaId":"684FA3C7-ABEA-4CB8-8D88-4BA18F1A73FB","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:cognos_analytics:11.2.4:fixpack5:*:*:*:*:*:*","matchCriteriaId":"3372238E-BFA8-4342-A523-9DB9628D11B7","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:cognos_analytics:11.2.4:fixpack6:*:*:*:*:*:*","matchCriteriaId":"0644AF6B-BBEB-4B56-A6A6-D6BE073DA900","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:cognos_analytics:11.2.4:interim_fix_1:*:*:*:*:*:*","matchCriteriaId":"C0259B4F-E86A-44E5-A1FA-39A57E915822","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:cognos_analytics:11.2.4:interim_fix_2:*:*:*:*:*:*","matchCriteriaId":"CEF69734-E894-49E2-9295-03330FE19F9C","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:cognos_analytics:11.2.4:interim_fix_3:*:*:*:*:*:*","matchCriteriaId":"28C2275C-A326-4914-BD31-923E0976DA5B","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:cognos_analytics:11.2.4:interim_fix_4:*:*:*:*:*:*","matchCriteriaId":"C19D8CDA-E883-4F76-ACEE-FE16A6AB75A1","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:cognos_analytics:11.2.4:interim_fix_5:*:*:*:*:*:*","matchCriteriaId":"AF2CD238-A72E-4689-B8E7-2949A0E618E2","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:cognos_analytics:12.0.4:interim_fix_1:*:*:*:*:*:*","matchCriteriaId":"3C54FA39-7D14-434E-A9FB-5606A3A08185","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:cognos_analytics:12.0.4:interim_fix_2:*:*:*:*:*:*","matchCriteriaId":"BAB2758C-ECD5-4186-823A-5DB55265BC55","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:cognos_analytics:12.0.4:interim_fix_3:*:*:*:*:*:*","matchCriteriaId":"60BC347B-50AB-440E-A2C0-904DC9704581","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:cognos_transformer:11.2.4:*:*:*:*:*:*:*","matchCriteriaId":"9FF70630-4FCC-42CB-AEC0-0341335E38CC","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:cognos_transformer:12.0:*:*:*:*:*:*:*","matchCriteriaId":"91020D54-7072-4B79-AC60-DD68E8F36C7F","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:cognos_transformer:12.1.0:*:*:*:*:*:*:*","matchCriteriaId":"E1B1D10C-E219-4536-89AB-F7B6A16B0A97","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"IBM Cognos Analytics 11.2.0, 11.2.4, 12.0, and 12.1.0 and IBM Cognos Transformer 11.2.4, 12.0, and 12.1.0 are vulnerable to cross-site scripting (XSS). This vulnerability allows a remote attacker to inject arbitrary JavaScript code into the web user interface, which may alter the intended functionality and could lead to the disclosure of credentials within a trusted session."},{"lang":"es","value":"IBM Cognos Analytics 11.2.0, 11.2.4, 12.0, y 12.1.0 y IBM Cognos Transformer 11.2.4, 12.0, y 12.1.0 son vulnerables a cross-site scripting (XSS). Esta vulnerabilidad permite a un atacante remoto inyectar código JavaScript arbitrario en la interfaz de usuario web, lo que puede alterar la funcionalidad prevista y podría conducir a la divulgación de credenciales dentro de una sesión de confianza."}],"id":"CVE-2025-3633","lastModified":"2026-10-14T13:10:00.187","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.4,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":2.3,"impactScore":2.7,"source":"psirt@us.ibm.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":8.2,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":4.7,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-3633","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-05-27T14:27:31.520327Z","version":"2.0.3"}}]},"published":"2026-05-27T14:16:42.233","references":[{"source":"psirt@us.ibm.com","tags":["Vendor Advisory"],"url":"https://www.ibm.com/support/pages/node/7272628"}],"sourceIdentifier":"psirt@us.ibm.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"psirt@us.ibm.com","type":"Secondary"}]}
|