Security Advisory

CVE-2025-36126

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-26 15:52:49

Last updated 2026-05-27 17:20:14

Assigner ibm

CVSS score 6.4

State PUBLISHED

Description

IBM Cognos Analytics 11.2.0, 12.0, and 12.1.0 and IBM Cognos Transformer 12.0, 11.2.4, and 12.1.0 is vulnerable to stored cross-site scripting (XSS) in Cognos Adminstration. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

← Browse all CVEs View on cve.org ↗