Medium severity5.4NVD Advisory· Published Aug 16, 2023· Updated Jun 17, 2026
CVE-2023-35011
CVE-2023-35011
Description
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 257705.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
15cpe:2.3:a:ibm:cognos_analytics:*:*:*:*:*:*:*:*+ 14 more
- cpe:2.3:a:ibm:cognos_analytics:*:*:*:*:*:*:*:*range: >=11.1.0,<11.1.7
- cpe:2.3:a:ibm:cognos_analytics:11.1.7:-:*:*:*:*:*:*
- cpe:2.3:a:ibm:cognos_analytics:11.1.7:interimfix1:*:*:*:*:*:*
- cpe:2.3:a:ibm:cognos_analytics:11.1.7:interimfix2:*:*:*:*:*:*
- cpe:2.3:a:ibm:cognos_analytics:11.1.7:interimfix3:*:*:*:*:*:*
- cpe:2.3:a:ibm:cognos_analytics:11.1.7:interimfix4:*:*:*:*:*:*
- cpe:2.3:a:ibm:cognos_analytics:11.1.7:interimfix5:*:*:*:*:*:*
- cpe:2.3:a:ibm:cognos_analytics:11.1.7:interimfix6:*:*:*:*:*:*
- cpe:2.3:a:ibm:cognos_analytics:11.1.7:interimfix7:*:*:*:*:*:*
- cpe:2.3:a:ibm:cognos_analytics:11.1.7:interimfix8:*:*:*:*:*:*
- cpe:2.3:a:ibm:cognos_analytics:11.1.7:interimfix9:*:*:*:*:*:*
- cpe:2.3:a:ibm:cognos_analytics:11.2.4:-:*:*:*:*:*:*
- cpe:2.3:a:ibm:cognos_analytics:11.2.4:fixpack1:*:*:*:*:*:*
- (no CPE)range: 11.1.7, 11.2.0, and 11.2.1
- (no CPE)range: 11.1.7, 11.2.0, 11.2.1
Patches
Vulnerability mechanics
References
4- www.ibm.com/support/pages/node/7026692nvdPatchVendor Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/257705nvdVDB EntryVendor Advisory
- security.netapp.com/advisory/ntap-20230921-0005/nvd
- security.netapp.com/advisory/ntap-20240621-0005/nvd
News mentions
0No linked articles in our index yet.