GHSA-hfqv-qm4h-qgqv
GitHub Security Advisory
⚠ Unreviewed
CRITICAL
Has CVE
Advisory Details
IBM Cognos Analytics 11.2.0 through 11.2.4 FP4 and
12.0.0 through 12.0.4
is vulnerable to an Expression Language (EL) Injection vulnerability. A remote attacker could exploit this vulnerability to expose sensitive information, consume memory resources, and/or cause the server to crash when using a specially crafted EL statement.
Related CVEs
Key Information
9.0
/10
Dataset
Last updated: June 12, 2025 6:24 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.