CVE-2025-3633 — IBM Cognos Analytics is affected by multiple security vulnerabilities

CVE-2025-3633

IBM Cognos Analytics is affected by multiple security vulnerabilities PUBLISHED

Description (CNA)

IBM Cognos Analytics 11.2.0, 11.2.4, 12.0, and 12.1.0 and IBM Cognos Transformer 11.2.4, 12.0, and 12.1.0 are vulnerable to cross-site scripting (XSS). This vulnerability allows a remote attacker to inject arbitrary JavaScript code into the web user interface, which may alter the intended functionality and could lead to the disclosure of credentials within a trusted session.

Affected (CNA)

Vendor / product	Versions
IBM / Cognos Analytics	affected 11.2.0; affected 12.0; affected 12.1.0
IBM / Cognos Transformer	affected 12.0; affected 11.2.4; affected 12.1.0

CWE

CWE-79

References

https://www.ibm.com/support/pages/node/7272628

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.