Known vulnerabilities in IBM Cognos Command Center - page 4

Vendor: IBM Corporation
Software: IBM Cognos Command Center
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cognos_command_center:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 104
Public exploits: 13
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cognos Command Center IBM Cognos Command Center is affected by 104 known vulnerabilities: 2 critical, 9 high, 49 medium, 44 low Critical High Medium Low

Vulnerabilities (104)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU71993 - Information Exposure Through Timing Discrepancy
CVE-2022-4304		 CWE-208 Medium
No
No
 10.2.4 Fix Pack 1 IF17 07.02.2023 SB2023020742
SB2023020748
SB2023020767
and 222 more
#VU68441 - Improper input validation
CVE-2022-21624		 CWE-20 Low
No
No
 10.2.4 Fix Pack 1 IF17 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 142 more
#VU68307 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-42889		 CWE-94 High
Available
Exploited
 10.2.4 Fix Pack 1 IF17 14.10.2022 SB2022101405
SB2022102709
SB2022110306
and 91 more
#VU65832 - Missing release of memory after effective lifetime
CVE-2022-2191		 CWE-401 Medium
No
No
 10.2.4 Fix Pack 1 IF17 27.07.2022 SB2022072723
SB2022100615
SB2022101891
and 8 more
#VU65831 - Improper input validation
CVE-2022-2047		 CWE-20 Low
No
No
 10.2.4 Fix Pack 1 IF17 27.07.2022 SB2022072723
SB2022080103
SB2022080260
and 41 more
#VU65830 - Resource Management Errors
CVE-2022-2048		 CWE-399 Medium
No
No
 10.2.4 Fix Pack 1 IF17 27.07.2022 SB2022072723
SB2022080103
SB2022080260
and 44 more
#VU62397 - Improper input validation
CVE-2022-21449		 CWE-20 Medium
Available
No
 10.2.4 Fix Pack 1 IF17 19.04.2022 SB2022041944
SB2022041945
SB2022042106
and 24 more
#VU62401 - Improper input validation
CVE-2022-21434		 CWE-20 Medium
No
No
 10.2.4 Fix Pack 1 IF17 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 111 more
#VU62402 - Improper input validation
CVE-2022-21443		 CWE-20 Low
No
No
 10.2.4 Fix Pack 1 IF17 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 109 more
#VU59693 - Deserialization of Untrusted Data
CVE-2020-9493		 CWE-502 High
No
No
 10.2.4 Fix Pack 1 IF15 18.01.2022 SB2021061626
SB2022011819
SB2022012640
and 62 more
#VU55060 - Improper input validation
CVE-2021-2341		 CWE-20 Low
No
No
 - 20.07.2021 SB2021072054
SB2021072055
SB2021072201
and 72 more
#VU55058 - Improper Verification of Cryptographic Signature
CVE-2021-2369		 CWE-347 Low
No
No
 - 20.07.2021 SB2021072054
SB2021072055
SB2021072201
and 76 more
#VU53973 - Improper input validation
CVE-2021-28169		 CWE-20 Medium
No
No
 10.2.4 Fix Pack 1 IF17 09.06.2021 SB2021060910
SB2021061815
SB2021081922
and 36 more
#VU52448 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-2161		 CWE-94 Medium
No
No
 - 21.04.2021 SB2021042115
SB2021042116
SB2021042117
and 45 more
#VU52385 - Improper input validation
CVE-2020-27223		 CWE-20 Medium
Available
No
 10.2.4 Fix Pack 1 IF17 21.04.2021 SB2021042107
SB2021063002
SB2021063034
and 19 more
#VU51876 - Resource exhaustion
CVE-2021-28165		 CWE-400 Medium
No
No
 10.2.4 Fix Pack 1 IF17 01.04.2021 SB2021040179
SB2021042208
SB2021050704
and 56 more
#VU47778 - Improper input validation
CVE-2020-14782		 CWE-20 Low
No
No
 - 21.10.2020 SB2020102109
SB2020102110
SB2020102801
and 52 more
#VU36036 - Improper input validation
CVE-2018-12545		 CWE-20 Medium
No
No
 10.2.4 Fix Pack 1 IF17 27.03.2019 SB2019032714
SB2023020235
SB2023050520
and 4 more
#VU13529 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2017-7658		 CWE-444 Low
No
No
 10.2.4 Fix Pack 1 IF17 02.07.2018 SB2018070205
SB2018082001
SB2020102711
and 17 more
#VU13528 - Exposure of sensitive information to an unauthorized actor
CVE-2017-7657		 CWE-200 Low
No
No
 10.2.4 Fix Pack 1 IF17 02.07.2018 SB2018070205
SB2018082001
SB2022040632
and 18 more


Showing elements 61 - 80 out of 104