CVE-2021-38945

CRITICAL 9.8CVE-2021-38945 · Published 24/06/2022 · updated 17/06/2026

In short

CVE-2021-38945 is a CRITICAL (CVSS 9.8) vulnerability affecting cognos analytics (ibm).
Chance of exploitation in the next 30 days (EPSS): 1.8%, higher than 78.0% of all vulnerabilities.
Fix: update to 11.1.7 or later.

Package	Affected versions	Patched versions
cognos analytics ibm	`= 11.1.7= 11.2.0= 11.2.1≥ 11.1.0, < 11.1.7`	`11.1.7`

Description

IBM Cognos Analytics 11.2.1, 11.2.0, and 11.1.7 could allow a remote attacker to upload arbitrary files, caused by improper content validation. IBM X-Force ID: 211238.

References

exchange.xforce.ibmcloud.com/vulnerabilities/211238 · VDB Entry
security.netapp.com/advisory/ntap-20220729-0002 · Third Party Advisory
ibm.com/support/pages/node/6597241 · Patch

More vulnerabilities in cognos analytics

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

cognos analytics

ibm

= 11.1.7= 11.2.0= 11.2.1≥ 11.1.0, < 11.1.7

11.1.7

More vulnerabilities in cognos analytics

See all →