| CVE-2025-36102 |
IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 could allow a privileged user…
|
2.7
Low
|
Dec 8, 2025 |
| CVE-2025-33111 |
IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 is vulnerable to creation of…
|
4.3
Medium
|
Dec 8, 2025 |
| CVE-2025-36015 |
IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 could allow an authenticated…
|
6.5
Medium
|
Dec 8, 2025 |
| CVE-2025-36326 |
IBM Cognos Controller 11.0.0 through 11.0.1, and IBM Controller 11.1.0 through 11.1.1 could allow an attacker to…
|
3.7
Low
|
Sep 26, 2025 |
| CVE-2025-33079 |
IBM Controller 11.0.0, 11.0.1, and 11.1.0 application could allow an authenticated user to obtain sensitive…
|
6.5
Medium
|
May 27, 2025 |
| CVE-2022-39163 |
IBM Cognos Controller 11.0.0 through 11.1.0 is vulnerable to a Client-Side Desync (CSD) attack where an attacker could…
|
4.7
Medium
|
Mar 26, 2025 |
| CVE-2023-47160 |
IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 is vulnerable to an XML External Entity…
|
8.2
High
|
Feb 19, 2025 |
| CVE-2024-28777 |
IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 is vulnerable to unrestricted…
|
8.8
High
|
Feb 19, 2025 |
| CVE-2024-28776 |
IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0
is vulnerable to cross-site scripting
|
5.4
Medium
|
Feb 19, 2025 |
| CVE-2024-28780 |
IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 Rich Client uses weaker than expected…
|
5.9
Medium
|
Feb 19, 2025 |
| CVE-2024-45081 |
IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 could allow an authenticated user to modify…
|
6.5
Medium
|
Feb 19, 2025 |
| CVE-2024-45084 |
IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 could allow an authenticated attacker to…
|
8.0
High
|
Feb 19, 2025 |
| CVE-2024-52902 |
IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 client application contains hard coded…
|
8.8
High
|
Feb 19, 2025 |
| CVE-2022-22363 |
IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow a remote attacker to obtain…
|
4.3
Medium
|
Jan 7, 2025 |
| CVE-2021-20455 |
IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow a remote attacker to obtain…
|
3.7
Low
|
Jan 7, 2025 |
| CVE-2024-40702 |
IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow an unauthorized user to obtain valid…
|
8.2
High
|
Jan 7, 2025 |
| CVE-2024-28778 |
IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 is vulnerable to exposure of Artifactory API keys
|
6.5
Medium
|
Jan 7, 2025 |
| CVE-2024-25037 |
IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow a remote attacker to obtain…
|
4.3
Medium
|
Jan 7, 2025 |
| CVE-2024-41775 |
IBM Cognos Controller 11.0.0 and 11.0.1 uses weaker than expected cryptographic algorithms that could allow an…
|
5.9
Medium
|
Dec 3, 2024 |
| CVE-2024-25020 |
IBM Cognos Controller 11.0.0 and 11.0.1 is vulnerable to malicious file upload by allowing unrestricted filetype…
|
5.5
Medium
|
Dec 3, 2024 |
| CVE-2024-41776 |
IBM Cognos Controller 11.0.0 and 11.0.1 is vulnerable to cross-site request forgery which could allow an attacker to…
|
6.5
Medium
|
Dec 3, 2024 |
| CVE-2024-41777 |
IBM Cognos Controller 11.0.0 and 11.0.1 contains hard-coded credentials, such as a password or cryptographic key, which…
|
7.5
High
|
Dec 3, 2024 |
| CVE-2024-45676 |
IBM Cognos Controller 11.0.0 and 11.0.1 could allow an authenticated user to upload insecure files, due to insufficient…
|
4.3
Medium
|
Dec 3, 2024 |
| CVE-2024-25036 |
IBM Cognos Controller 11.0.0 and 11.0.1 could allow an authenticated user with local access to bypass security allowing…
|
4.3
Medium
|
Dec 3, 2024 |
| CVE-2024-25035 |
IBM Cognos Controller 11.0.0 and 11.0.1 exposes server details that could allow an attacker to obtain information of…
|
5.3
Medium
|
Dec 3, 2024 |