VULNERABILITY INTELLIGENCE

CVE-2022-39163

CVSS score4.7 MEDIUM

EPSS probability0.20%

CISA KEVNot currently listed

Published2025-03-26

Last modified2026-06-17

Description

IBM Cognos Controller 11.0.0 through 11.1.0 is vulnerable to a Client-Side Desync (CSD) attack where an attacker could exploit a desynchronized browser connection that could lead to further cross-site scripting (XSS) attacks.