CVE-2017-1783

IBM Cognos Analytics 11.0 could allow a local user to change parameters set from the Cognos Analytics menus without proper authentication. IBM X-Force ID: 136857.

• CWE-287

• http://www.ibm.com/support/docview.wss?uid=swg22011561Vendor Advisory
• http://www.securityfocus.com/bid/102863Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040299Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/136857VDB Entry, Vendor Advisory
• https://security.netapp.com/advisory/ntap-20190329-0003/Broken Link
• https://security.netapp.com/advisory/ntap-20190401-0003/Third Party Advisory
• http://www.ibm.com/support/docview.wss?uid=swg22011561Vendor Advisory
• http://www.securityfocus.com/bid/102863Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040299Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/136857VDB Entry, Vendor Advisory
• https://security.netapp.com/advisory/ntap-20190329-0003/Broken Link
• https://security.netapp.com/advisory/ntap-20190401-0003/Third Party Advisory

Published

Jan 29, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-17824The Batch Manager component of Piwigo 2.9.2 is vulnerable to…
• CVE-2017-17825The Batch Manager component of Piwigo 2.9.2 is vulnerable to…
• CVE-2017-17826The Configuration component of Piwigo 2.9.2 is vulnerable to…
• CVE-2017-17827Piwigo 2.9.2 is vulnerable to Cross-Site Request Forgery via…
• CVE-2017-17828Bus Booking Script has XSS via the results.php datepicker pa…4.8
• CVE-2017-17829Bus Booking Script has SQL Injection via the admin/view_seat…
• CVE-2017-17830Bus Booking Script has CSRF via admin/new_master.php.
• CVE-2017-17831GitHub Git LFS before 2.1.1 allows remote attackers to execu…
• CVE-2017-17832ServersCheck Monitoring Software before 14.2.3 is prone to a…
• CVE-2017-17833OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a …
• CVE-2017-17834Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-17835In Apache Airflow 1.8.2 and earlier, a CSRF vulnerability al…