| CVE-2024-40691 |
IBM Cognos Controller 11.0.0 and 11.0.1 could be vulnerable to malicious file upload by not validating the content of…
|
8.0
High
|
Dec 3, 2024 |
| CVE-2024-25019 |
IBM Cognos Controller 11.0.0 and 11.0.1 could be vulnerable to malicious file upload by not validating the type of file…
|
5.5
Medium
|
Dec 3, 2024 |
| CVE-2021-29892 |
IBM Cognos Controller 11.0.0 and 11.0.1 could allow a remote attacker to obtain sensitive information, caused by the…
|
5.9
Medium
|
Dec 3, 2024 |
| CVE-2023-40695 |
IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 does not invalidate session after logout which could allow an…
|
6.3
Medium
|
May 3, 2024 |
| CVE-2021-20451 |
IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 is vulnerable to SQL injection
|
6.0
Medium
|
May 3, 2024 |
| CVE-2022-22364 |
IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 is vulnerable to external service interaction attack, caused by…
|
5.3
Medium
|
May 3, 2024 |
| CVE-2023-28952 |
IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 is vulnerable to injection attacks in application logging by not…
|
5.3
Medium
|
May 3, 2024 |
| CVE-2023-38724 |
IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 is vulnerable to SQL injection
|
6.3
Medium
|
May 3, 2024 |
| CVE-2023-40696 |
IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 uses weaker than expected cryptographic algorithms that could allow…
|
5.9
Medium
|
May 3, 2024 |
| CVE-2021-20556 |
IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 could allow a remote user to enumerate usernames due to differentiating…
|
5.3
Medium
|
May 3, 2024 |
| CVE-2023-23474 |
IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 could allow a remote attacker to obtain sensitive information when a…
|
3.7
Low
|
May 3, 2024 |
| CVE-2021-20450 |
IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 does not set the secure attribute on authorization tokens or session…
|
4.3
Medium
|
May 3, 2024 |
| CVE-2020-4874 |
IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 uses weaker than expected cryptographic algorithms that could allow…
|
5.9
Medium
|
May 3, 2024 |
| CVE-2020-4879 |
IBM Cognos Controller 10.4.0, 10.4.1, and 10.4.2 could allow a remote attacker to bypass security restrictions, caused…
|
7.3
High
|
Jan 21, 2022 |
| CVE-2020-4877 |
IBM Cognos Controller 10.4.0, 10.4.1, and 10.4.2 could be vulnerable to unauthorized modifications by using public…
|
7.3
High
|
Jan 21, 2022 |
| CVE-2020-4876 |
IBM Cognos Controller 10.4.0, 10.4.1, and 10.4.2 is vulnerable to an XML External Entity Injection (XXE) attack when…
|
7.1
High
|
Jan 21, 2022 |
| CVE-2020-4875 |
IBM Cognos Controller 10.4.0, 10.4.1, and 10.4.2 is vulnerable to an XML External Entity Injection (XXE) attack when…
|
7.1
High
|
Jan 21, 2022 |
| CVE-2020-4685 |
A low level user of IBM Cognos Controller 10.3.0, 10.3.1, 10.4.0, 10.4.1, and 10.4.2 who has Administration rights to…
|
8.0
High
|
Nov 11, 2020 |
| CVE-2019-4412 |
IBM Cognos Controller stores sensitive information in URL parameters
|
3.7
Low
|
Nov 9, 2019 |
| CVE-2019-4411 |
IBM Cognos Controller 10.3.0, 10.3.1, 10.4.0, and 10.4.1 could allow an authenticated user to obtain sensitive…
|
4.3
Medium
|
Nov 9, 2019 |
| CVE-2019-4175 |
IBM Cognos Controller 10.3.0, 10.3.1, 10.4.0, and 10.4.1 uses weaker than expected cryptographic algorithms that could…
|
5.9
Medium
|
Sep 17, 2019 |
| CVE-2019-4171 |
IBM Cognos Controller 10.3.0, 10.3.1, 10.4.0, and 10.4.1 does not set the secure attribute on authorization tokens or…
|
3.7
Low
|
Sep 17, 2019 |
| CVE-2019-4177 |
IBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1, and 10.4.0 allows web pages to be stored locally which can be read…
|
4.0
Medium
|
Jun 17, 2019 |
| CVE-2019-4176 |
IBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1, and 10.4.0 could allow a remote attacker to bypass security…
|
5.3
Medium
|
Jun 17, 2019 |
| CVE-2019-4174 |
IBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1, and 10.4.0 allows web pages to be stored locally which can be read…
|
4.0
Medium
|
Jun 17, 2019 |