CVE-2022-30614

HIGH 7.5CVE-2022-30614 · Published 01/09/2022 · updated 17/06/2026

In short

CVE-2022-30614 is a HIGH (CVSS 7.5) vulnerability affecting cognos analytics (ibm).
Chance of exploitation in the next 30 days (EPSS): 1.8%, higher than 78.1% of all vulnerabilities.
Fix: update to 11.1.7, 11.2.3 or later.

Package	Affected versions	Patched versions
cognos analytics ibm	`= 11.1.7≥ 11.1.0, < 11.1.7≥ 11.2.0, < 11.2.3`	`11.1.711.2.3`

Description

IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to a denial of service via email flooding caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume all available CPU resources. IBM X-Force ID: 227591.

References

exchange.xforce.ibmcloud.com/vulnerabilities/227591 · VDB Entry
security.netapp.com/advisory/ntap-20221014-0005 · Third Party Advisory
ibm.com/support/pages/node/6615285 · Patch

More vulnerabilities in cognos analytics

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

cognos analytics

ibm

= 11.1.7≥ 11.1.0, < 11.1.7≥ 11.2.0, < 11.2.3

11.1.711.2.3

More vulnerabilities in cognos analytics

See all →