IBM Cognos Analytics <12.0.4 FP3

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

critical

by severity

0critical1high0medium0low

updated 2026-10-27

vulnerabilities (9)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-34197US	—OT critical	98.3% (100th)	KEV	no fix	2026-04-07	—
CVE-2025-59375US	—	1.38% (72nd)	—	no fix	2025-09-15	—
CVE-2026-41605US	—	0.93% (60th)	—	no fix	2026-04-28	—
CVE-2026-41604US	—	0.92% (60th)	—	no fix	2026-04-28	—
CVE-2025-69534US	high7.5	0.60% (49th)	—	no fix	2026-03-05	—
CVE-2026-45205US	—	0.47% (40th)	—	no fix	2026-05-14	—
CVE-2026-33227US	—	0.42% (36th)	—	no fix	2026-04-07	—
CVE-2026-39373US	—	0.29% (22nd)	—	no fix	2026-04-07	—
CVE-2026-41603US	—	—	—	no fix	2026-04-28	—

The flaw types (CWEs) most of these CVEs share.

CWE-125Out-of-bounds Read1 CVEs
CWE-190Integer Overflow or Wraparound1 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-248Uncaught Exception1 CVEs
CWE-400Uncontrolled Resource Consumption1 CVEs
CWE-409Improper Handling of Highly Compressed Data (Data Amplification)1 CVEs
CWE-617Reachable Assertion1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.