Ibm Cognos Transformer vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Ibm Cognos Transformer: 2 record(s), with affected versions and fixes.
cpe:2.3:a:ibm:cognos_transformer

CVE-2025-3633 High · 8.2 CWE-79 May 27, 2026

IBM Cognos Analytics is affected by multiple security vulnerabilities

IBM Cognos Analytics 11.2.0, 11.2.4, 12.0, and 12.1.0 and IBM Cognos Transformer 11.2.4, 12.0, and 12.1.0 are vulnerable to cross-site scripting (XSS). This vulnerability allows a remote attacker to inject arbitrary JavaScript code into the web user interface, which may alter the intended functionality and could lead to the disclosure of credentials within a trusted session.

CVE-2025-36126 High · 7.6 CWE-79 May 26, 2026

IBM Cognos Analytics is affected by Cross-site scripting.

IBM Cognos Analytics 11.2.0, 12.0, and 12.1.0 and IBM Cognos Transformer 12.0, 11.2.4, and 12.1.0 is vulnerable to stored cross-site scripting (XSS) in Cognos Adminstration. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.