CVE-2025-33147 - Vulnerability Details - OpenCVE

IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 could allow an attacker on a shared network to obtain sensitive information caused by insecure network communication.

No CVSS v4.0

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Ibm	Cognos Analytics

No data.

No data.

References

Link	Providers
https://www.ibm.com/support/pages/node/7287209

History

Mon, 21 Sep 2026 15:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Fri, 18 Sep 2026 15:45:00 +0000

Type	Values Removed	Values Added
Description		IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 could allow an attacker on a shared network to obtain sensitive information caused by insecure network communication.
Title		IBM Cognos Analytics versions 12.0.4 and 12.1.3 is affected by security vulnerabilities
First Time appeared		Ibm Ibm cognos Analytics
Weaknesses		CWE-327
CPEs		cpe:2.3:a:ibm:cognos_analytics:12.0.4:::::::* cpe:2.3:a:ibm:cognos_analytics:12.1.0:::::::* cpe:2.3:a:ibm:cognos_analytics:12.1.3:::::::*
Vendors & Products		Ibm Ibm cognos Analytics
References		https://www.ibm.com/support/pages/node/7287209
Metrics		cvssV3_1 `{'score': 5.9, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N'}`

MITRE

Status: PUBLISHED

Assigner: ibm

Published: 2026-09-18T15:40:41.286Z

Updated: 2026-09-21T14:05:27.186Z

Reserved: 2025-04-15T17:51:29.195Z

Link: CVE-2025-33147

Vulnrichment

Updated: 2026-09-21T14:05:19.000Z

NVD

Status : Awaiting Analysis

Published: 2026-09-18T16:17:02.657

Modified: 2026-10-14T18:10:00.207

Link: CVE-2025-33147

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-33147", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "state": "PUBLISHED", "assignerShortName": "ibm", "dateReserved": "2025-04-15T17:51:29.195Z", "datePublished": "2026-09-18T15:40:41.286Z", "dateUpdated": "2026-09-21T14:05:27.186Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-09-18T15:40:41.286Z"}, "title": "IBM Cognos Analytics versions 12.0.4 and 12.1.3 is affected by security vulnerabilities", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-327", "description": "CWE-327 Use of a Broken or Risky Cryptographic Algorithm", "type": "CWE"}]}], "affected": [{"vendor": "IBM", "product": "Cognos Analytics", "versions": [{"status": "affected", "version": "12.1.0", "lessThanOrEqual": "12.1.3 FP1", "versionType": "semver"}, {"status": "affected", "version": "12.0.4", "lessThanOrEqual": "12.0.4 FP2", "versionType": "semver"}], "cpes": ["cpe:2.3:a:ibm:cognos_analytics:12.1.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:cognos_analytics:12.1.3:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:cognos_analytics:12.0.4:*:*:*:*:*:*:*"]}], "descriptions": [{"lang": "en", "value": "IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 could allow an attacker on a shared network to obtain sensitive information caused by insecure network communication.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 could allow an attacker on a shared network to obtain sensitive information caused by insecure network communication.</p>"}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7287209", "tags": ["vendor-advisory", "patch"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE", "baseSeverity": "MEDIUM", "baseScore": 5.9, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"}}], "solutions": [{"lang": "en", "value": "IBM strongly recommends addressing the vulnerability now.\n\nAffected Product(s)Version(s)Fix VersionIBM Cognos Analytics12.1.0, 12.1.1, 12.1.2, 12.1.3, 12.1.3 FP1 12.1.3 FP2 https://www.ibm.com/support/pages/node/7283969 IBM Cognos Analytics12.0.4 - 12.0.4 FP2 12.0.4 FP3 https://www.ibm.com/support/pages/node/7269268", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>IBM strongly recommends addressing the vulnerability now.</p><div><table><colgroup><col/><col/><col/></colgroup><tbody><tr><td>Affected Product(s)</td><td>Version(s)</td><td>Fix Version</td></tr><tr><td>IBM Cognos Analytics</td><td>12.1.0, 12.1.1, 12.1.2, 12.1.3, 12.1.3 FP1</td><td><a href=\"https://www.ibm.com/support/pages/node/7283969\" rel=\"nofollow\">12.1.3 FP2</a></td></tr><tr><td>IBM Cognos Analytics</td><td>12.0.4 - 12.0.4 FP2</td><td><a href=\"https://www.ibm.com/support/pages/node/7269268\" rel=\"nofollow\">12.0.4 FP3</a></td></tr><tr><td></td><td></td><td></td></tr></tbody></table></div>"}]}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-09-21T14:05:15.253036Z", "id": "CVE-2025-33147", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-21T14:05:27.186Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-33147", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-09-21T14:05:15.253036Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-21T14:05:19.000Z"}}], "cna": {"title": "IBM Cognos Analytics versions 12.0.4 and 12.1.3 is affected by security vulnerabilities", "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"cpes": ["cpe:2.3:a:ibm:cognos_analytics:12.1.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:cognos_analytics:12.1.3:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:cognos_analytics:12.0.4:*:*:*:*:*:*:*"], "vendor": "IBM", "product": "Cognos Analytics", "versions": [{"status": "affected", "version": "12.1.0", "versionType": "semver", "lessThanOrEqual": "12.1.3 FP1"}, {"status": "affected", "version": "12.0.4", "versionType": "semver", "lessThanOrEqual": "12.0.4 FP2"}]}], "solutions": [{"lang": "en", "value": "IBM strongly recommends addressing the vulnerability now.\n\nAffected Product(s)Version(s)Fix VersionIBM Cognos Analytics12.1.0, 12.1.1, 12.1.2, 12.1.3, 12.1.3 FP1 12.1.3 FP2 https://www.ibm.com/support/pages/node/7283969 IBM Cognos Analytics12.0.4 - 12.0.4 FP2 12.0.4 FP3 https://www.ibm.com/support/pages/node/7269268", "supportingMedia": [{"type": "text/html", "value": "<p>IBM strongly recommends addressing the vulnerability now.</p><div><table><colgroup><col/><col/><col/></colgroup><tbody><tr><td>Affected Product(s)</td><td>Version(s)</td><td>Fix Version</td></tr><tr><td>IBM Cognos Analytics</td><td>12.1.0, 12.1.1, 12.1.2, 12.1.3, 12.1.3 FP1</td><td><a href=\"https://www.ibm.com/support/pages/node/7283969\" rel=\"nofollow\">12.1.3 FP2</a></td></tr><tr><td>IBM Cognos Analytics</td><td>12.0.4 - 12.0.4 FP2</td><td><a href=\"https://www.ibm.com/support/pages/node/7269268\" rel=\"nofollow\">12.0.4 FP3</a></td></tr><tr><td></td><td></td><td></td></tr></tbody></table></div>", "base64": false}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7287209", "tags": ["vendor-advisory", "patch"]}], "descriptions": [{"lang": "en", "value": "IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 could allow an attacker on a shared network to obtain sensitive information caused by insecure network communication.", "supportingMedia": [{"type": "text/html", "value": "<p>IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 could allow an attacker on a shared network to obtain sensitive information caused by insecure network communication.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-327", "description": "CWE-327 Use of a Broken or Risky Cryptographic Algorithm"}]}], "providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-09-18T15:40:41.286Z"}}}, "cveMetadata": {"cveId": "CVE-2025-33147", "state": "PUBLISHED", "dateUpdated": "2026-09-21T14:05:27.186Z", "dateReserved": "2025-04-15T17:51:29.195Z", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "datePublished": "2026-09-18T15:40:41.286Z", "assignerShortName": "ibm"}, "dataVersion": "5.2"}