PT-2025-25232 · Ibm · Ibm Cognos Analytics

Published 2025-06-11 · Updated 2025-06-11 · CVE-2025-25032

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions IBM Cognos Analytics versions 11.2.0 through 12.0.4

Description The issue allows an authenticated user to cause a denial of service by sending a specially crafted request that would exhaust memory resources.

Recommendations For IBM Cognos Analytics versions 11.2.0 through 12.0.4, apply the recommended fix from the vendor to prevent denial of service attacks.

Fix

DoS

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

BDU:2025-07705

CVE-2025-25032

Affected Products

Ibm Cognos Analytics

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-25032 · Security Note
• https://osv.dev/vulnerability/CVE-2025-25032 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-07705 · Security Note
• https://t.me/latest_high_impact_cve/2611 · Telegram Post
• https://ibm.com/support/pages/node/7234674 · Vendor Advisory, Patch
• https://twitter.com/CVEnew/status/1932858070314422539 · Twitter Post
• https://t.me/cvetracker/26048 · Telegram Post
• https://t.me/cvenotify/125421 · Telegram Post