Known vulnerabilities in IBM Cognos Command Center - page 2

Vendor: IBM Corporation
Software: IBM Cognos Command Center
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cognos_command_center:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 104
Public exploits: 13
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cognos Command Center IBM Cognos Command Center is affected by 104 known vulnerabilities: 2 critical, 9 high, 49 medium, 44 low Critical High Medium Low

Vulnerabilities (104)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU87864 - Exposure of sensitive information to an unauthorized actor
CVE-2023-50324		 CWE-200 Medium
No
No
 10.2.5 IF1 27.03.2024 SB2024032729
#VU87863 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2010-2084		 CWE-79 Low
No
No
 10.2.5 IF1 27.03.2024 SB2024032729
#VU87744 - Out-of-bounds write
CVE-2024-29133		 CWE-787 High
No
No
 10.2.5 IF2 22.03.2024 SB2024032169
SB2024032283
SB20240417122
and 40 more
#VU87706 - Out-of-bounds write
CVE-2024-29131		 CWE-787 High
No
No
 10.2.5 IF2 21.03.2024 SB2024032169
SB2024032283
SB20240417122
and 36 more
#VU86625 - Resource exhaustion
CVE-2024-26308		 CWE-400 Medium
No
No
 10.2.5 IF2 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 138 more
#VU86624 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-25710		 CWE-835 Medium
No
No
 10.2.5 IF2 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 102 more
#VU86329 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2024-22361		 CWE-327 Medium
No
No
 10.2.5 IF2 12.02.2024 SB2024021209
SB2024031233
SB2024031235
and 13 more
#VU85468 - Improper input validation
CVE-2024-20918		 CWE-20 Medium
No
No
 10.2.5 IF2 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 192 more
#VU85471 - Improper input validation
CVE-2024-20921		 CWE-20 Medium
No
No
 10.2.5 IF2 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 185 more
#VU85472 - Improper input validation
CVE-2024-20926		 CWE-20 Medium
No
No
 10.2.5 IF2 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 164 more
#VU85473 - Improper input validation
CVE-2024-20945		 CWE-20 Low
No
No
 10.2.5 IF2 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 177 more
#VU83267 - Improper input validation
CVE-2023-5676		 CWE-20 Low
No
No
 10.2.5 IF1 20.11.2023 SB2023112010
SB2023112011
SB2023112726
and 101 more
#VU82690 - Deserialization of Untrusted Data
CVE-2023-46604		 CWE-502 Critical
Available
Exploited
 10.2.5 IF1 02.11.2023 SB2023110251
SB2023111311
SB2023112410
and 36 more
#VU82141 - Improper input validation
CVE-2023-22081		 CWE-20 Medium
No
No
 10.2.5 IF1 17.10.2023 SB2023101797
SB2023101798
SB2023101905
and 187 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 10.2.5 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 651 more
#VU80793 - Improper Authorization
CVE-2023-41900		 CWE-285 Low
No
No
 10.2.5 14.09.2023 SB2023091440
SB2023092933
SB2023102621
and 29 more
#VU80792 - Improper input validation
CVE-2023-36479		 CWE-20 Medium
No
No
 10.2.5 14.09.2023 SB2023091440
SB2023092933
SB2023102621
and 48 more
#VU80791 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-40167		 CWE-444 Medium
No
No
 10.2.5 14.09.2023 SB2023091440
SB2023092933
SB2023101760
and 68 more
#VU78414 - Improper input validation
CVE-2023-22049		 CWE-20 Low
No
No
 10.2.5 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 164 more
#VU78415 - Improper input validation
CVE-2023-22036		 CWE-20 Low
No
No
 10.2.5 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 65 more


Showing elements 21 - 40 out of 104