Medium severity6.5NVD Advisory· Published Dec 19, 2022· Updated Jun 17, 2026
CVE-2022-43883
CVE-2022-43883
Description
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could be vulnerable to a Log Injection attack by constructing URLs from user-controlled data. This could enable attackers to make arbitrary requests to the internal network or to the local file system. IBM X-Force ID: 240266.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
211.1.7, 11.2.0, 11.2.1+ 1 more
- (no CPE)range: 11.1.7, 11.2.0, 11.2.1
- (no CPE)range: 11.1.7, 11.2.0, 11.2.1
Patches
Vulnerability mechanics
References
2- www.ibm.com/support/pages/node/6841801nvdPatchVendor Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/240266nvdVDB EntryVendor Advisory
News mentions
0No linked articles in our index yet.