CVE-2020-4388

HIGH

IBM Cognos Analytics 11.0-11.1 - Denial of Service via Exception Handling Failure

Title source: llm
STIX 2.1

Description

IBM Cognos Analytics 11.0 and 11.1 could be vulnerable to a denial of service attack by failing to catch exceptions in a servlet also exposing debug information could also be used in future attacks. IBM X-Force ID: 179270.

References (2)

Core 2
Core References
Patch, Vendor Advisory x_refsource_confirm
https://www.ibm.com/support/pages/node/6346922
VDB Entry, Vendor Advisory vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/179270

Scores

CVSS v3 8.2
EPSS 0.0125
EPSS Percentile 65.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Details

CWE
CWE-755
Status published
Products (2)
ibm/cognos_analytics 11.0.13 (3 CPE variants)
ibm/cognos_analytics 11.0.0 - 11.0.13
Published Oct 12, 2020
Tracked Since Feb 18, 2026