Medium severity5.3NVD Advisory· Published Aug 16, 2023· Updated Jun 17, 2026
CVE-2023-35009
CVE-2023-35009
Description
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could allow a remote attacker to obtain system information without authentication which could be used in reconnaissance to gather information that could be used for future attacks. IBM X-Force ID: 257703.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
15cpe:2.3:a:ibm:cognos_analytics:*:*:*:*:*:*:*:*+ 14 more
- cpe:2.3:a:ibm:cognos_analytics:*:*:*:*:*:*:*:*range: >=11.1.0,<11.1.7
- cpe:2.3:a:ibm:cognos_analytics:11.1.7:-:*:*:*:*:*:*
- cpe:2.3:a:ibm:cognos_analytics:11.1.7:interimfix1:*:*:*:*:*:*
- cpe:2.3:a:ibm:cognos_analytics:11.1.7:interimfix2:*:*:*:*:*:*
- cpe:2.3:a:ibm:cognos_analytics:11.1.7:interimfix3:*:*:*:*:*:*
- cpe:2.3:a:ibm:cognos_analytics:11.1.7:interimfix4:*:*:*:*:*:*
- cpe:2.3:a:ibm:cognos_analytics:11.1.7:interimfix5:*:*:*:*:*:*
- cpe:2.3:a:ibm:cognos_analytics:11.1.7:interimfix6:*:*:*:*:*:*
- cpe:2.3:a:ibm:cognos_analytics:11.1.7:interimfix7:*:*:*:*:*:*
- cpe:2.3:a:ibm:cognos_analytics:11.1.7:interimfix8:*:*:*:*:*:*
- cpe:2.3:a:ibm:cognos_analytics:11.1.7:interimfix9:*:*:*:*:*:*
- cpe:2.3:a:ibm:cognos_analytics:11.2.4:-:*:*:*:*:*:*
- cpe:2.3:a:ibm:cognos_analytics:11.2.4:fixpack1:*:*:*:*:*:*
- (no CPE)range: 11.1.7, 11.2.0, and 11.2.1
- (no CPE)range: 11.1.7, 11.2.0, 11.2.1
Patches
Vulnerability mechanics
References
4- www.ibm.com/support/pages/node/7026692nvdPatchVendor Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/257703nvdVDB EntryVendor Advisory
- security.netapp.com/advisory/ntap-20230831-0014/nvd
- security.netapp.com/advisory/ntap-20240621-0005/nvd
News mentions
0No linked articles in our index yet.