CVE-2024-51466 — IBM Cognos Analytics expression language injection

CVE-2024-51466

IBM Cognos Analytics expression language injection PUBLISHED

Description (CNA)

IBM Cognos Analytics 11.2.0 through 11.2.4 FP4 and 12.0.0 through 12.0.4 is vulnerable to an Expression Language (EL) Injection vulnerability. A remote attacker could exploit this vulnerability to expose sensitive information, consume memory resources, and/or cause the server to crash when using a specially crafted EL statement.

Affected (CNA)

Vendor / product	Versions
IBM / Cognos Analytics	affected 11.2.0 through 11.2.4; affected 12.0.0 through 12.0.4

CWE

CWE-917

References

https://www.ibm.com/support/pages/node/7179496

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.