| CVE-2025-36421 |
IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 transmits data in clear text that could allow an…
|
5.9
Moyenne
|
18 sept. 2026 |
| CVE-2025-36178 |
IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 could allow an authenticated user to bypass…
|
5.4
Moyenne
|
18 sept. 2026 |
| CVE-2025-1350 |
IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 could allow a remote attacker to obtain…
|
5.3
Moyenne
|
18 sept. 2026 |
| CVE-2026-5065 |
IBM Controller 11.0.1, 11.1.0, 11.1.1, and 11.1.2 contains hard-coded credentials, such as a password or cryptographic…
|
8.8
Élevée
|
27 mai 2026 |
| CVE-2025-36017 |
IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 stores unencrypted sensitive…
|
6.5
Moyenne
|
8 déc. 2025 |
| CVE-2025-36102 |
IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 could allow a privileged user…
|
2.7
Faible
|
8 déc. 2025 |
| CVE-2025-33111 |
IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 is vulnerable to creation of…
|
4.3
Moyenne
|
8 déc. 2025 |
| CVE-2025-36015 |
IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 could allow an authenticated…
|
6.5
Moyenne
|
8 déc. 2025 |
| CVE-2025-36326 |
IBM Cognos Controller 11.0.0 through 11.0.1, and IBM Controller 11.1.0 through 11.1.1 could allow an attacker to…
|
3.7
Faible
|
26 sept. 2025 |
| CVE-2025-33079 |
IBM Controller 11.0.0, 11.0.1, and 11.1.0 application could allow an authenticated user to obtain sensitive…
|
6.5
Moyenne
|
27 mai 2025 |
| CVE-2022-39163 |
IBM Cognos Controller 11.0.0 through 11.1.0 is vulnerable to a Client-Side Desync (CSD) attack where an attacker could…
|
4.7
Moyenne
|
26 mars 2025 |
| CVE-2024-41778 |
IBM Controller 11.0.0 through 11.0.1 and 11.1.0 does not require that users should have strong passwords by default,…
|
5.3
Moyenne
|
1 mars 2025 |
| CVE-2023-47160 |
IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 is vulnerable to an XML External Entity…
|
8.2
Élevée
|
19 févr. 2025 |
| CVE-2024-28777 |
IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 is vulnerable to unrestricted…
|
8.8
Élevée
|
19 févr. 2025 |
| CVE-2024-28776 |
IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0
is vulnerable to cross-site scripting
|
5.4
Moyenne
|
19 févr. 2025 |
| CVE-2024-28780 |
IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 Rich Client uses weaker than expected…
|
5.9
Moyenne
|
19 févr. 2025 |
| CVE-2024-45081 |
IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 could allow an authenticated user to modify…
|
6.5
Moyenne
|
19 févr. 2025 |
| CVE-2024-45084 |
IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 could allow an authenticated attacker to…
|
8.0
Élevée
|
19 févr. 2025 |
| CVE-2024-52902 |
IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 client application contains hard coded…
|
8.8
Élevée
|
19 févr. 2025 |
| CVE-2022-22363 |
IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow a remote attacker to obtain…
|
4.3
Moyenne
|
7 janv. 2025 |
| CVE-2021-20455 |
IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow a remote attacker to obtain…
|
3.7
Faible
|
7 janv. 2025 |
| CVE-2024-40702 |
IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow an unauthorized user to obtain valid…
|
8.2
Élevée
|
7 janv. 2025 |
| CVE-2024-28778 |
IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 is vulnerable to exposure of Artifactory API keys
|
6.5
Moyenne
|
7 janv. 2025 |
| CVE-2024-25037 |
IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow a remote attacker to obtain…
|
4.3
Moyenne
|
7 janv. 2025 |