Vulnerability Details CVE-2024-40703
IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, 12.0.2, 12.0.3, and IBM Cognos Analytics Reports for iOS 11.0.0.7 could allow a local attacker to obtain sensitive information in the form of an API key. An attacker could use this information to launch further attacks against affected applications.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 2.0%
CVSS Severity
CVSS v3 Score 5.5
References
Products affected by CVE-2024-40703
-
cpe:2.3:a:ibm:cognos_analytics:11.2.0
-
cpe:2.3:a:ibm:cognos_analytics:11.2.1
-
cpe:2.3:a:ibm:cognos_analytics:11.2.2
-
cpe:2.3:a:ibm:cognos_analytics:11.2.3
-
cpe:2.3:a:ibm:cognos_analytics:11.2.4
-
cpe:2.3:a:ibm:cognos_analytics:12.0.0
-
cpe:2.3:a:ibm:cognos_analytics:12.0.1
-
cpe:2.3:a:ibm:cognos_analytics:12.0.2
-
cpe:2.3:a:ibm:cognos_analytics:12.0.3
-
cpe:2.3:a:ibm:cognos_analytics_reports:11.0.0.7