Back to overview

CVE-2026-15995

MEDIUM
5.4
CVSS 3.1
Description
IBM Cognos Analytics 12.1.3 GA Version with build number through 12.1.3-2606251736 could allow an attacker to obtain incorrect report summary results or cause report-processing failures due to a race condition in the Agentic AI assistant's concurrent request-handling logic when multiple authenticated users submit report-related tasks simultaneously.

Metadata

CVE ID
CVE-2026-15995
State
PUBLISHED
Assigner
ibm
Reserved
2026-07-16 21:12 UTC
Published
2026-07-17 19:34 UTC
Last updated
2026-07-17 19:34 UTC
Primary CWE
CWE-362
CWE-362 Concurrent Execution using Shared Resource with Impr…
Vendor / Product
IBM / Cognos Analytics
Sources
cve.org  ·  NVD

Severity & Metrics

5.4 MEDIUM CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Affected products (1)
VendorProductPlatformVersions
IBM Cognos Analytics — 12.1.3 GA Version with build number ≤ 12.1.3-2606251736
Weakness (CWE)
CWESourceDescription
CWE-362 cna CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVSS scores (1)
ScoreSeverityVersionSourceVector
5.4 MEDIUM 3.1 cna CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
References (1)
Back to overview