Cognos analytics

This hub aggregates every CVE we track for Cognos analytics, a product in the enterprise software space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Cognos analytics.

• CVE-2026-15995IBM Cognos Analytics 12.1.3 general availability package contains a data integrity issue in the Agentic AI assistant that may cause incorrect report summaries or report-processing errors under concurrent use5.4Jul 17, 2026
• CVE-2025-3633IBM Cognos Analytics is affected by multiple security vulnerabilities5.4May 27, 2026
• CVE-2025-36126IBM Cognos Analytics is affected by Cross-site scripting.6.4May 26, 2026
• CVE-2024-52900IBM Cognos Analytics cross-site scripting6.4Jun 28, 2025
• CVE-2025-0923IBM Cognos Analytics information disclosure5.3Jun 11, 2025
• CVE-2025-0917IBM Cognos Analytics cross-site scripting5.5Jun 11, 2025
• CVE-2025-25032IBM Cognos Analytics denial of service7.5Jun 11, 2025
• CVE-2024-56340IBM Cognos Analytics path traversal6.5Feb 28, 2025
• CVE-2025-0823IBM MQ path traversal6.5Feb 28, 2025
• CVE-2024-49352IBM Cognos Anaytics XML external entity injection7.1Feb 5, 2025
• CVE-2023-38009IBM Cognos Analytics Mobile information disclosure4.2Jan 26, 2025
• CVE-2024-40695IBM Cognos Analytics file upload8.0Dec 20, 2024
• CVE-2024-51466IBM Cognos Analytics expression language injection9.0Dec 20, 2024
• CVE-2024-25042IBM Cognos Analytics cross-site scripting5.4Dec 18, 2024
• CVE-2024-45082IBM Cognos Analytics HTTP open redirection6.8Dec 18, 2024