Volerion logoVolerion
Volerion logoVolerion

IBM Cognos Dashboards Dependency Confusion Vulnerability Allowing Unauthorized Actions

Vulnerability

A dependency confusion vulnerability has been identified in IBM Cognos Dashboards versions 4.0.7 and 5.0.0 on Cloud Pak for Data. This vulnerability could enable a remote attacker to perform unauthorized actions.

Impact

Exploitation of this vulnerability could lead to unauthorized actions being performed within the application.

Remediation

Users are advised to upgrade to version 5.1 or to version 4.8.0. Instructions for upgrading from version 5.0.0 to 5.1.0 and from version 4.8.0 to 5.1.0 are available in the IBM Cloud Pak for Data documentation.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
1.4
impact
5.0
exploitability
7.0
remediation
7.7
relevance
0.0
threat
0.0
urgency
2.9
incentive
5.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.