CVE-2012-4847

IBM Cognos Business Intelligence 8.4 and 8.4.1 - Authenticated Denial of Service via Zero-Byte Request

Title source: llm
STIX 2.1

Description

IBM Cognos Business Intelligence (BI) 8.4 and 8.4.1 allows remote authenticated users to cause a denial of service (CPU consumption) via a crafted request containing a zero-valued byte.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/79536
Vendor Advisory x_refsource_confirm
http://www.ibm.com/support/docview.wss?uid=swg21615445

Scores

EPSS 0.0097
EPSS Percentile 58.4%

Details

CWE
CWE-189
Status published
Products (2)
ibm/cognos_business_intelligence 8.4
ibm/cognos_business_intelligence 8.4.1
Published Nov 14, 2012
Tracked Since Feb 18, 2026