Skip to content
Sign in
5.9 Medium

CVE-2021-29892 IBM Cognos Controller 11.0.0 and 11.0.1 could allow a remote attacker to obtain sensitive information, caused by the…

Description

IBM Cognos Controller 11.0.0 and 11.0.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.

Affected products and versions

Product Affected versions Fixed in
Cognos Controller Versions not published

Other CVEs of Cognos Controller

The 52 CVEs of Cognos Controller →
CVE-2025-36102 IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 could allow a privileged user… 2.7 Low CVE-2025-33111 IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 is vulnerable to creation of… 4.3 Medium CVE-2025-36015 IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 could allow an authenticated… 6.5 Medium CVE-2025-36326 IBM Cognos Controller 11.0.0 through 11.0.1, and IBM Controller 11.1.0 through 11.1.1 could allow an attacker to… 3.7 Low
Track this CVE