CVE-2023-32344

Summary

CVE-2023-32344 is a form action hijacking vulnerability affecting IBM Cognos Analytics versions 11.1.7, 11.2.4, and 12.0.0. Hackers can exploit this issue by manipulating forms to redirect users to unintended web pages, potentially leading to data theft or unauthorized system access. IBM's X-Force has assigned the ID 255898 to this vulnerability. This weakness could pose a significant risk to organizations using the affected IBM Cognos Analytics versions, and it is recommended that they apply available patches to mitigate the threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.