CO
Product
Controller
24
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 7Medium 15Low 2
Watch
Add Controller to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-5065 | 8.8 | May 27 | IBM Controller is affected by vulnerabilities Affected: 11.0.1 through 26.0.0.5; 11.1.0; 11.1.1; 11.1.2 |
| CVE-2024-28777 | 8.8 | Feb 19 | IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 is vulnerable to unrestricted deserialization Affected: 11.1.0 |
| CVE-2024-52902 | 8.8 | Feb 19 | IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 client application contains hard coded database passwords in source code which could be used for… Affected: 11.1.0 |
| CVE-2023-47160 | 8.2 | Feb 19 | IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data Affected: 11.1.0 |
| CVE-2024-40702 | 8.2 | Jan 7 | IBM Cognos Controller improper certificate validation Affected: 11.1.0 |
| CVE-2024-45084 | 8.0 | Feb 19 | IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 could allow an authenticated attacker to conduct formula injection Affected: 11.1.0 |
| CVE-2025-36326 | 7.5 | Sep 26 | IBM Controller information disclosure Affected: 11.1.0 through 11.1.1 |
Showing 7