CVE-2024-56340

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

IBM Cognos Analytics 11.2.0 through 11.2.4 FP5 is vulnerable to local file inclusion vulnerability, allowing an attacker to access sensitive files by inserting path traversal payloads inside the deficon parameter.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-23

Affected software

No affected versions have been published.

Timeline

Published: Feb 28, 2025
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-563415.4IBM Content Navigator 3.0.11, 3.0.15, and 3.1.0 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to em CVE-2024-563425.3IBM Verify Identity Access Digital Credentials 24.06 could allow a remote attacker to obtain sensitive information when a detailed technical CVE-2024-563436.5IBM Verify Identity Access Digital Credentials 24.06 could allow an authenticated user to crash the service with a specially crafted POST re CVE-2024-563445.9IBM Cognos Analytics 12.0.4 through 12.0.4 FP2, and 12.1.0 through 12.1.3 FP1 could allow a remote attacker to obtain sensitive information,CVE-2024-5634610.0IBM AIX 7.2 and 7.3 nimesis NIM master service could allow a remote attacker to execute arbitrary commands due to improper process controls.CVE-2024-563479.6IBM AIX 7.2 and 7.3 nimsh service SSL/TLS protection mechanisms could allow a remote attacker to execute arbitrary commands due to improper CVE-2024-563484.3In JetBrains TeamCity before 2024.12 improper access control allowed viewing details of unauthorized agents CVE-2024-563495.3In JetBrains TeamCity before 2024.12 improper access control allowed unauthorized users to modify build logs CVE-2024-56359.8A vulnerability was found in itsourcecode Bakery Online Ordering System 1.0. It has been declared as critical. Affected by this vulnerabilit CVE-2024-563504.3In JetBrains TeamCity before 2024.12 build credentials allowed unauthorized viewing of projects CVE-2024-563518.8In JetBrains TeamCity before 2024.12 access tokens were not revoked after removing user roles CVE-2024-563525.4In JetBrains TeamCity before 2024.12 stored XSS was possible via image name on the agent details page