BaseFortify

Publication date: 2026-09-18

Last updated on: 2026-09-19

Assigner: IBM Corporation

Description

IBM Cognos Analytics 12.0.4 through 12.0.4 FP2, and 12.1.0 through 12.1.3 FP1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-18

Last Modified

2026-09-19

Generated

2026-09-20

EPSS Evaluated

N/A

NVD

CVE-2024-56344

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-327	The product uses a broken or risky cryptographic algorithm or protocol.

Attack-Flow Graph

AI Quick Actions have not been generated yet.

Hi! I’m here to help you understand CVE-2024-56344. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70