CVE-2023-35011

IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 257705.

• CWE-918
• CWE-918

• https://exchange.xforce.ibmcloud.com/vulnerabilities/257705VDB Entry, Vendor Advisory
• https://security.netapp.com/advisory/ntap-20230921-0005/
• https://security.netapp.com/advisory/ntap-20240621-0005/
• https://www.ibm.com/support/pages/node/7026692Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/257705VDB Entry, Vendor Advisory
• https://security.netapp.com/advisory/ntap-20230921-0005/
• https://security.netapp.com/advisory/ntap-20240621-0005/
• https://www.ibm.com/support/pages/node/7026692Patch, Vendor Advisory

Published

Aug 16, 2023

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-35003Path transversal in some Intel(R) VROC software before versi…7.8
• CVE-2023-35004An integer overflow vulnerability exists in the VZT longest_…7.8
• CVE-2023-35005In Apache Airflow, some potentially sensitive values were be…6.5
• CVE-2023-35006IBM Security QRadar EDR 3.12 is vulnerable to HTML injection…5.4
• CVE-2023-35009IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could allow …5.3
• CVE-2023-3501The FormCraft WordPress plugin before 1.2.7 does not sanitis…4.8
• CVE-2023-35012IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Se…6.7
• CVE-2023-35013IBM Security Verify Governance 10.0, Identity Manager could …4.4
• CVE-2023-35016IBM Security Verify Governance, Identity Manager 10.0 could …6.5
• CVE-2023-35017IBM Security Verify Governance 10.0.2 Identity Manager can t…5.9
• CVE-2023-35018IBM Security Verify Governance 10.0 could allow a privileged…7.2
• CVE-2023-35019IBM Security Verify Governance, Identity Manager 10.0 could …8.8