| CVE-2025-36421 |
IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 transmits data in clear text that could allow an…
|
5.9
Medium
|
Sep 18, 2026 |
| CVE-2025-36178 |
IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 could allow an authenticated user to bypass…
|
5.4
Medium
|
Sep 18, 2026 |
| CVE-2025-1350 |
IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 could allow a remote attacker to obtain…
|
5.3
Medium
|
Sep 18, 2026 |
| CVE-2026-5065 |
IBM Controller 11.0.1, 11.1.0, 11.1.1, and 11.1.2 contains hard-coded credentials, such as a password or cryptographic…
|
8.8
High
|
May 27, 2026 |
| CVE-2025-36017 |
IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 stores unencrypted sensitive…
|
6.5
Medium
|
Dec 8, 2025 |
| CVE-2025-36102 |
IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 could allow a privileged user…
|
2.7
Low
|
Dec 8, 2025 |
| CVE-2025-33111 |
IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 is vulnerable to creation of…
|
4.3
Medium
|
Dec 8, 2025 |
| CVE-2025-36015 |
IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 could allow an authenticated…
|
6.5
Medium
|
Dec 8, 2025 |
| CVE-2025-36326 |
IBM Cognos Controller 11.0.0 through 11.0.1, and IBM Controller 11.1.0 through 11.1.1 could allow an attacker to…
|
3.7
Low
|
Sep 26, 2025 |
| CVE-2025-33079 |
IBM Controller 11.0.0, 11.0.1, and 11.1.0 application could allow an authenticated user to obtain sensitive…
|
6.5
Medium
|
May 27, 2025 |
| CVE-2022-39163 |
IBM Cognos Controller 11.0.0 through 11.1.0 is vulnerable to a Client-Side Desync (CSD) attack where an attacker could…
|
4.7
Medium
|
Mar 26, 2025 |
| CVE-2024-41778 |
IBM Controller 11.0.0 through 11.0.1 and 11.1.0 does not require that users should have strong passwords by default,…
|
5.3
Medium
|
Mar 1, 2025 |
| CVE-2023-47160 |
IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 is vulnerable to an XML External Entity…
|
8.2
High
|
Feb 19, 2025 |
| CVE-2024-28777 |
IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 is vulnerable to unrestricted…
|
8.8
High
|
Feb 19, 2025 |
| CVE-2024-28776 |
IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0
is vulnerable to cross-site scripting
|
5.4
Medium
|
Feb 19, 2025 |
| CVE-2024-28780 |
IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 Rich Client uses weaker than expected…
|
5.9
Medium
|
Feb 19, 2025 |
| CVE-2024-45081 |
IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 could allow an authenticated user to modify…
|
6.5
Medium
|
Feb 19, 2025 |
| CVE-2024-45084 |
IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 could allow an authenticated attacker to…
|
8.0
High
|
Feb 19, 2025 |
| CVE-2024-52902 |
IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 client application contains hard coded…
|
8.8
High
|
Feb 19, 2025 |
| CVE-2022-22363 |
IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow a remote attacker to obtain…
|
4.3
Medium
|
Jan 7, 2025 |
| CVE-2021-20455 |
IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow a remote attacker to obtain…
|
3.7
Low
|
Jan 7, 2025 |
| CVE-2024-40702 |
IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow an unauthorized user to obtain valid…
|
8.2
High
|
Jan 7, 2025 |
| CVE-2024-28778 |
IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 is vulnerable to exposure of Artifactory API keys
|
6.5
Medium
|
Jan 7, 2025 |
| CVE-2024-25037 |
IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow a remote attacker to obtain…
|
4.3
Medium
|
Jan 7, 2025 |