Aller au contenu

Vulnérabilités connues pour IBM Cognos Controller

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2025-36102 IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 could allow a privileged user… 2.7 Faible 8 déc. 2025
CVE-2025-33111 IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 is vulnerable to creation of… 4.3 Moyenne 8 déc. 2025
CVE-2025-36015 IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 could allow an authenticated… 6.5 Moyenne 8 déc. 2025
CVE-2025-36326 IBM Cognos Controller 11.0.0 through 11.0.1, and IBM Controller 11.1.0 through 11.1.1 could allow an attacker to… 3.7 Faible 26 sept. 2025
CVE-2025-33079 IBM Controller 11.0.0, 11.0.1, and 11.1.0 application could allow an authenticated user to obtain sensitive… 6.5 Moyenne 27 mai 2025
CVE-2022-39163 IBM Cognos Controller 11.0.0 through 11.1.0 is vulnerable to a Client-Side Desync (CSD) attack where an attacker could… 4.7 Moyenne 26 mars 2025
CVE-2023-47160 IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 is vulnerable to an XML External Entity… 8.2 Élevée 19 févr. 2025
CVE-2024-28777 IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 is vulnerable to unrestricted… 8.8 Élevée 19 févr. 2025
CVE-2024-28776 IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 is vulnerable to cross-site scripting 5.4 Moyenne 19 févr. 2025
CVE-2024-28780 IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 Rich Client  uses weaker than expected… 5.9 Moyenne 19 févr. 2025
CVE-2024-45081 IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 could allow an authenticated user to modify… 6.5 Moyenne 19 févr. 2025
CVE-2024-45084 IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 could allow an authenticated attacker to… 8.0 Élevée 19 févr. 2025
CVE-2024-52902 IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 client application contains hard coded… 8.8 Élevée 19 févr. 2025
CVE-2022-22363 IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow a remote attacker to obtain… 4.3 Moyenne 7 janv. 2025
CVE-2021-20455 IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow a remote attacker to obtain… 3.7 Faible 7 janv. 2025
CVE-2024-40702 IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow an unauthorized user to obtain valid… 8.2 Élevée 7 janv. 2025
CVE-2024-28778 IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 is vulnerable to exposure of Artifactory API keys 6.5 Moyenne 7 janv. 2025
CVE-2024-25037 IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow a remote attacker to obtain… 4.3 Moyenne 7 janv. 2025
CVE-2024-41775 IBM Cognos Controller 11.0.0 and 11.0.1 uses weaker than expected cryptographic algorithms that could allow an… 5.9 Moyenne 3 déc. 2024
CVE-2024-25020 IBM Cognos Controller 11.0.0 and 11.0.1 is vulnerable to malicious file upload by allowing unrestricted filetype… 5.5 Moyenne 3 déc. 2024
CVE-2024-41776 IBM Cognos Controller 11.0.0 and 11.0.1 is vulnerable to cross-site request forgery which could allow an attacker to… 6.5 Moyenne 3 déc. 2024
CVE-2024-41777 IBM Cognos Controller 11.0.0 and 11.0.1 contains hard-coded credentials, such as a password or cryptographic key, which… 7.5 Élevée 3 déc. 2024
CVE-2024-45676 IBM Cognos Controller 11.0.0 and 11.0.1 could allow an authenticated user to upload insecure files, due to insufficient… 4.3 Moyenne 3 déc. 2024
CVE-2024-25036 IBM Cognos Controller 11.0.0 and 11.0.1 could allow an authenticated user with local access to bypass security allowing… 4.3 Moyenne 3 déc. 2024
CVE-2024-25035 IBM Cognos Controller 11.0.0 and 11.0.1 exposes server details that could allow an attacker to obtain information of… 5.3 Moyenne 3 déc. 2024

Autres produits IBM