CC
Product
Cognos Controller
52
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 16Medium 24Low 6
Watch
Add Cognos Controller to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-28777 | 8.8 | Feb 19 | IBM Cognos Controller code execution Affected: 11.0.0 before 11.0.1.4 |
| CVE-2024-52902 | 8.8 | Feb 19 | IBM Cognos Controller information disclosure Affected: 11.0.0 before 11.0.1.4 |
| CVE-2023-40695 | 8.8 | May 3 | IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system Affected: 10.4.1; 10.4.2; 11.0.0 |
| CVE-2023-47160 | 8.2 | Feb 19 | IBM Cognos Controller XML external entity injection Affected: 11.0.0 before 11.0.1.4 |
| CVE-2024-40702 | 8.2 | Jan 7 | IBM Cognos Controller improper certificate validation Affected: 11.0.0 through 11.0.1 |
| CVE-2020-4876 | 8.2 | Jan 21 | IBM Cognos Controller 10.4.0, 10.4.1, and 10.4.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data Affected: 10.4.0; 10.4.1; 10.4.2 |
| CVE-2020-4875 | 8.2 | Jan 21 | IBM Cognos Controller 10.4.0, 10.4.1, and 10.4.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data Affected: 10.4.0; 10.4.1; 10.4.2 |
| CVE-2024-45084 | 8.0 | Feb 19 | IBM Cognos Controller CSV injection Affected: 11.0.0 through 11.0.1 |
| CVE-2025-36326 | 7.5 | Sep 26 | IBM Controller information disclosure Affected: 11.0.0 through 11.0.1 |
| CVE-2024-41777 | 7.5 | Dec 3 | IBM Cognos Controller 11.0.0 and 11.0.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication,… Affected: 11.0.0; 11.0.1 |
| CVE-2024-41775 | 7.5 | Dec 3 | IBM Cognos Controller 11.0.0 and 11.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information Affected: 11.0.0; 11.0.1 |
| CVE-2023-40696 | 7.5 | May 3 | IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information Affected: 10.4.1; 10.4.2; 11.0.0 |
| CVE-2020-4874 | 7.5 | May 3 | IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information Affected: 10.4.1; 10.4.2; 11.0.0 |
| CVE-2019-4175 | 7.5 | Sep 17 | IBM Cognos Controller 10.3.0, 10.3.1, 10.4.0, and 10.4.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information Affected: 10.4.0; 10.4.1 |
| CVE-2021-20451 | 7.2 | May 3 | IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 is vulnerable to SQL injection Affected: 10.4.1; 10.4.2; 11.0.0 |
| CVE-2020-4685 | 7.2 | Nov 11 | A low level user of IBM Cognos Controller 10.3.0, 10.3.1, 10.4.0, 10.4.1, and 10.4.2 who has Administration rights to the server where the application is installed, can escalate… Affected: 10.3.0; 10.3.1; 10.4.0; 10.4.1; 10.4.2 |
Showing 16