CO
Product
Controller
24
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 7Medium 15Low 2
Watch
Add Controller to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-5065 | 8.8 | May 27 | IBM Controller is affected by vulnerabilities Affected: 11.0.1 through 26.0.0.5; 11.1.0; 11.1.1; 11.1.2 |
| CVE-2024-28777 | 8.8 | Feb 19 | IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 is vulnerable to unrestricted deserialization Affected: 11.1.0 |
| CVE-2024-52902 | 8.8 | Feb 19 | IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 client application contains hard coded database passwords in source code which could be used for… Affected: 11.1.0 |
| CVE-2023-47160 | 8.2 | Feb 19 | IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data Affected: 11.1.0 |
| CVE-2024-40702 | 8.2 | Jan 7 | IBM Cognos Controller improper certificate validation Affected: 11.1.0 |
| CVE-2024-45084 | 8.0 | Feb 19 | IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 could allow an authenticated attacker to conduct formula injection Affected: 11.1.0 |
| CVE-2025-36326 | 7.5 | Sep 26 | IBM Controller information disclosure Affected: 11.1.0 through 11.1.1 |
| CVE-2025-36017 | 6.5 | Dec 8 | IBM Controller Information Disclosure Affected: 11.1.0 through 11.1.1 |
| CVE-2025-36015 | 6.5 | Dec 8 | IBM Controller Denial of Service Affected: 11.1.0 through 11.1.1 |
| CVE-2025-33079 | 6.5 | May 27 | IBM Controller information disclosure Affected: 11.1.0 |
| CVE-2024-41778 | 6.5 | Mar 1 | IBM Controller 11.0.0 through 11.0.1 and 11.1.0 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user… Affected: 11.0.0; 11.0.1; 11.1.0 |
| CVE-2024-45081 | 6.5 | Feb 19 | IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 could allow an authenticated user to modify restricted content due to incorrect authorization checks Affected: 11.1.0 |
| CVE-2024-28778 | 6.5 | Jan 7 | IBM Cognos Controller information disclosure Affected: 11.1.0 |
| CVE-2025-36421 | 5.9 | Sep 18 | Multiple vulnerabilities in IBM Controller Affected: 11.0.0 through 11.0.1 FP7; 11.1.0 through 11.1.3 FP1 |
| CVE-2024-28780 | 5.9 | Feb 19 | IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 Rich Client uses weaker than expected cryptographic algorithms that could allow an attacker to… Affected: 11.1.0 |
| CVE-2025-36178 | 5.4 | Sep 18 | Multiple vulnerabilities in IBM Controller Affected: 11.0.0 through 11.0.1 FP7; 11.1.0 through 11.1.3 FP1 |
| CVE-2024-28776 | 5.4 | Feb 19 | IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 is vulnerable to cross-site scripting Affected: 11.1.0 |
| CVE-2025-1350 | 5.3 | Sep 18 | Multiple vulnerabilities in IBM Controller Affected: 11.0.0 through 11.0.1 FP7; 11.1.0 through 11.1.3 FP1 |
| CVE-2022-39163 | 4.7 | Mar 26 | IBM Cognos Controller 11.0.0 through 11.1.0 is vulnerable to a Client-Side Desync (CSD) attack where an attacker could exploit a desynchronized browser connection that could lead… Affected: 11.1.0 |
| CVE-2025-33111 | 4.3 | Dec 8 | IBM Controller Information Disclosure Affected: 11.1.0 through 11.1.1 |
| CVE-2022-22363 | 4.3 | Jan 7 | IBM Cognos Controller information disclosure Affected: 11.1.0 |
| CVE-2024-25037 | 4.3 | Jan 7 | IBM Cognos Controller information disclosure Affected: 11.1.0 |
| CVE-2021-20455 | 3.7 | Jan 7 | IBM Cognos Controller information disclosure Affected: 11.1.0 |
| CVE-2025-36102 | 2.7 | Dec 8 | IBM Controller Validation Bypass Affected: 11.1.0 through 11.1.1 |
Showing 24