Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2022-04-22	CVE-2021-38903	Cross-site Scripting vulnerability in multiple products IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. network low complexity ibm netapp CWE-79	5.4
2022-04-22	CVE-2021-38904	IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 could allow a remote attacker to obtain credentials from a user's browser via incorrect autocomplete settings. network low complexity ibm netapp	6.5
2022-04-22	CVE-2021-38905	IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 could allow an authenticated user to view report pages that they should not have access to. network low complexity ibm netapp	4.3
2022-04-22	CVE-2021-38946	Cross-site Scripting vulnerability in multiple products IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to cross-site scripting. network low complexity ibm netapp CWE-79	5.4
2021-12-03	CVE-2021-20493	Cross-site Scripting vulnerability in multiple products IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site scripting. network low complexity ibm netapp CWE-79	6.1
2021-12-03	CVE-2021-29716	IBM Cognos Analytics 11.1.7 and 11.2.0 could allow a low level user to reas of the application that privileged user should only be allowed to view. network low complexity ibm netapp	6.5
2021-12-03	CVE-2021-29719	IBM Cognos Analytics 11.1.7 and 11.2.0 could be vulnerable to client side vulnerabilties due to a web response specifying an incorrect content type. network low complexity ibm netapp	5.3
2021-12-03	CVE-2021-29867	IBM Cognos Analytics 11.1.7 and 11.2.0 could allow an authenticated to view or edit a Jupyter notebook that they should not have access to. network low complexity ibm netapp	5.4
2021-12-03	CVE-2021-38909	Cross-site Scripting vulnerability in multiple products IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site scripting. network low complexity ibm netapp CWE-79	5.4
2021-06-30	CVE-2021-20461	Exposure of Resource to Wrong Sphere vulnerability in multiple products IBM Cognos Analytics 10.0 and 11.1 is susceptible to a weakness in the implementation of the System Appearance configuration setting. network low complexity ibm netapp CWE-668	6.5