CC
Product
Cognos Controller
52
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 16Medium 24Low 6
Watch
Add Cognos Controller to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-25020 | 9.8 | Dec 3 | IBM Cognos Controller 11.0.0 and 11.0.1 is vulnerable to malicious file upload by allowing unrestricted filetype attachments in the Journal entry page Affected: 11.0.0; 11.0.1 |
| CVE-2024-40691 | 9.8 | Dec 3 | IBM Cognos Controller 11.0.0 and 11.0.1 could be vulnerable to malicious file upload by not validating the content of the file uploaded to the web interface Affected: 11.0.0; 11.0.1 |
| CVE-2024-25019 | 9.8 | Dec 3 | IBM Cognos Controller 11.0.0 and 11.0.1 could be vulnerable to malicious file upload by not validating the type of file uploaded to Journal entry attachments Affected: 11.0.0; 11.0.1 |
| CVE-2023-38724 | 9.8 | May 3 | IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 is vulnerable to SQL injection Affected: 10.4.1; 10.4.2; 11.0.0 |
| CVE-2020-4879 | 9.8 | Jan 21 | IBM Cognos Controller 10.4.0, 10.4.1, and 10.4.2 could allow a remote attacker to bypass security restrictions, caused by improper validation of authentication cookies Affected: 10.4.0; 10.4.1; 10.4.2 |
| CVE-2020-4877 | 9.8 | Jan 21 | IBM Cognos Controller 10.4.0, 10.4.1, and 10.4.2 could be vulnerable to unauthorized modifications by using public fields in public classes Affected: 10.4.0; 10.4.1; 10.4.2 |
Showing 6