CVE-2025-36076 — IBM Cognos Analytics versions 12.0.4 and 12.1.3 is affected by security vulnerabilities

CVE-2025-36076

IBM Cognos Analytics versions 12.0.4 and 12.1.3 is affected by security vulnerabilities PUBLISHED

Description (CNA)

IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 stores sensitive information in source code could be used by an authenticated user in further attacks against the system.

Affected (CNA)

Vendor / product	Versions
IBM / Cognos Analytics	affected 12.1.0 through 12.1.3 FP1; affected 12.0.4 through 12.0.4 FP2

CWE

CWE-540

References

https://www.ibm.com/support/pages/node/7287209

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.