GHSA-fxmj-6xv8-f3m7

GHSA-fxmj-6xv8-f3m7 PUBLISHED CVSS 4.300000190734863 MEDIUM

Record from GitHub Advisory Database · Published February 26, 2024

IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 is vulnerable to form action hijacking where it is possible to modify the form action to reference an arbitrary path. IBM X-Force ID: 255898.

Risk scores

CVSS 3.1

4.300000190734863

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Timeline

Feb 26, 2024 CVE Published
Apr 10, 2026 Security Advisory

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln GHSA-fxmj-6xv8-f3m7
vulnetix vdb fixes GHSA-fxmj-6xv8-f3m7

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/GHSA-fxmj-6xv8-f3m7/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

https://security.netapp.com/advisory/ntap-20240621-0006 url
https://nvd.nist.gov/vuln/detail/CVE-2023-32344 advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/255898 url
https://security.netapp.com/advisory/ntap-20240405-0002 url
https://www.ibm.com/support/pages/node/7123154 url

Look up in the Resolve Platform →