Known vulnerabilities in IBM Cognos Command Center - page 3

Vendor: IBM Corporation
Software: IBM Cognos Command Center
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cognos_command_center:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 104
Public exploits: 13
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cognos Command Center IBM Cognos Command Center is affected by 104 known vulnerabilities: 2 critical, 9 high, 49 medium, 44 low Critical High Medium Low

Vulnerabilities (104)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU81726 - Integer overflow
CVE-2023-36478		 CWE-190 Medium
No
No
 10.2.5 10.10.2023 SB2023101018
SB2023102640
SB2023103106
and 53 more
#VU75768 - Insufficient Session Expiration
CVE-2022-38707		 CWE-613 Low
No
No
 10.2.4 Fix Pack 1 IF17 05.05.2023 SB2023050520
#VU75264 - Improper input validation
CVE-2023-21939		 CWE-20 Medium
Available
No
 10.2.4 Fix Pack 1 IF19 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 179 more
#VU75261 - Improper input validation
CVE-2023-21967		 CWE-20 Medium
No
No
 10.2.4 Fix Pack 1 IF19 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 189 more
#VU70441 - Insufficient Verification of Data Authenticity
CVE-2021-37533		 CWE-345 Low
No
No
 10.2.4 Fix Pack 1 IF17 20.12.2022 SB2022122007
SB2022123001
SB2023011876
and 82 more
#VU68832 - Resource exhaustion
CVE-2022-42004		 CWE-400 Medium
No
No
 10.2.4 Fix Pack 1 IF17 31.10.2022 SB2022103116
SB2022103117
SB2022111404
and 122 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003		 CWE-502 Medium
No
No
 10.2.4 Fix Pack 1 IF17 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU65834 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-31160		 CWE-79 Low
No
No
 10.2.4 Fix Pack 1 IF17 27.07.2022 SB2022072727
SB2022100608
SB2022121119
and 44 more
#VU62987 - Improper input validation
CVE-2022-29117		 CWE-20 Medium
No
No
 10.2.4 Fix Pack 1 IF19 11.05.2022 SB2022051101
SB2022051220
SB2022051221
and 14 more
#VU55642 - Insufficient Session Expiration
CVE-2021-34428		 CWE-613 Low
No
No
 10.2.4 Fix Pack 1 IF17 08.08.2021 SB2021080801
SB2021080803
SB2021081922
and 25 more
#VU52502 - Improper input validation
CVE-2020-27218		 CWE-20 Medium
No
No
 10.2.4 Fix Pack 1 IF17 23.04.2021 SB2021042305
SB2021042635
SB2021063002
and 15 more
#VU52252 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-29425		 CWE-22 Low
No
No
 10.2.4 Fix Pack 1 IF17 15.04.2021 SB2021041510
SB2021081922
SB2021093016
and 121 more
#VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11023		 CWE-79 Low
Available
Exploited
 10.2.4 Fix Pack 1 IF17 05.05.2020 SB2020042126
SB2020052033
SB2020052103
and 180 more
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11022		 CWE-79 Low
Available
No
 10.2.4 Fix Pack 1 IF17 21.04.2020 SB2020042126
SB2020052033
SB2020052103
and 181 more
#VU26320 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-10241		 CWE-79 Low
No
No
 10.2.4 Fix Pack 1 IF17 23.03.2020 SB2020032710
SB2020072802
SB2020121701
and 14 more
#VU25067 - Improper input validation
CVE-2019-10247		 CWE-20 Medium
No
No
 10.2.4 Fix Pack 1 IF17 07.02.2020 SB2020011489
SB2020032710
SB2020042110
and 25 more
#VU18092 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2019-11358		 CWE-1321 Low
Available
No
 10.2.4 Fix Pack 1 IF17 28.03.2019 SB2019032804
SB2019041026
SB2019041801
and 155 more
#VU14150 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-9251		 CWE-79 Low
No
No
 10.2.4 Fix Pack 1 IF17 31.07.2018 SB2018080106
SB2019011705
SB2019100301
and 63 more
#VU13530 - Exposure of sensitive information to an unauthorized actor
CVE-2018-12536		 CWE-200 Low
No
No
 10.2.4 Fix Pack 1 IF17 02.07.2018 SB2018070205
SB2022032830
SB2022032831
and 8 more
#VU13527 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2017-7656		 CWE-444 Low
No
No
 10.2.4 Fix Pack 1 IF17 30.06.2018 SB2018070205
SB2018082001
SB2022041923
and 17 more


Showing elements 41 - 60 out of 104