CVE-2025-0923

IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, 12.0.2, 12.0.3, and 12.0.4 stores source code on the web server that could aid in further attacks against the system.

Scoring

Severity

MEDIUM

CVSS base score

5.3

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS probability

0.26%

CWE

CWE-540

Published

2025-06-11

Last modified

2026-03-13

Affected products

• IBM Cognos Analytics
• IBM Cognos Analytics
• IBM Cognos Analytics
• IBM Cognos Analytics
• IBM Cognos Analytics
• IBM Cognos Analytics
• IBM Cognos Analytics
• IBM Cognos Analytics

Weakness type

• CWE-540

Related vulnerabilities

• CVE-2026-16581 — Inclusion of sensitive information in source code in igloohome Smart Lock Mobile Application
• CVE-2026-45728 — Algernon: Single-file mode unconditionally enables debug mode
• CVE-2026-4155 — ChargePoint Home Flex Inclusion of Sensitive Information in Source Code Information Disclosure Vulnerability
• CVE-2026-35383 — Bentley Systems iTwin Platform exposed access token
• CVE-2026-22275 — Dell ECS, versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.2.0.0,...
• CVE-2025-36299 — IBM Planning Analytics Information Disclosure
• CVE-2024-38327 — IBM Analytics Content Hub information disclosure
• CVE-2025-49182 — Credential disclosure

Markdown version · Browse all CVEs