# Ibm Cognos Analytics


- [CVE-2020-4561](https://insights.sbomify.com/CVE-2020-4561/): Missing authorization in Cognos Analytics (critical 10.0)
- [CVE-2024-51466](https://insights.sbomify.com/CVE-2024-51466/): IBM Cognos Analytics expression language injection (critical 9.0)
- [CVE-2021-29679](https://insights.sbomify.com/CVE-2021-29679/): Code injection in Cognos Analytics (high 8.8)
- [CVE-2024-25047](https://insights.sbomify.com/CVE-2024-25047/): IBM Cognos Analytics log injection (high 8.6)
- [CVE-2018-1721](https://insights.sbomify.com/CVE-2018-1721/): IBM Cognos Analytics 11.0 and 11.1 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. (high 8.3)
- [CVE-2020-4300](https://insights.sbomify.com/CVE-2020-4300/): XML external entity in Cognos Analytics (high 8.2)
- [CVE-2020-4377](https://insights.sbomify.com/CVE-2020-4377/): XML external entity in Cognos Analytics (high 8.2)
- [CVE-2024-40695](https://insights.sbomify.com/CVE-2024-40695/): IBM Cognos Analytics file upload (high 8.0)
- [CVE-2017-1779](https://insights.sbomify.com/CVE-2017-1779/): Information disclosure in Cognos Analytics (high 7.8)
- [CVE-2025-25032](https://insights.sbomify.com/CVE-2025-25032/): IBM Cognos Analytics denial of service (high 7.5)
- [CVE-2024-49352](https://insights.sbomify.com/CVE-2024-49352/): IBM Cognos Anaytics XML external entity injection (high 7.1)
- [CVE-2022-36773](https://insights.sbomify.com/CVE-2022-36773/): XML external entity in Cognos Analytics (high 7.1)

---
From sbomify Insights: https://insights.sbomify.com/products/ibm/cognos-analytics/