Known vulnerabilities in IBM Cognos Command Center - page 5

Vendor: IBM Corporation
Software: IBM Cognos Command Center
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cognos_command_center:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 104
Public exploits: 13
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cognos Command Center IBM Cognos Command Center is affected by 104 known vulnerabilities: 2 critical, 9 high, 49 medium, 44 low Critical High Medium Low

Vulnerabilities (104)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU61799 - Out-of-bounds write
CVE-2020-36518		 CWE-787 Medium
No
No
 10.2.4 Fix Pack 1 IF15 01.04.2022 SB2022040113
SB2022040114
SB2022040115
and 147 more
#VU61756 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-22965		 CWE-94 Critical
Available
Exploited
 10.2.4 Fix Pack 1 IF15 31.03.2022 SB2022033109
SB2022040109
SB2022040110
and 78 more
#VU60083 - Improper Access Control
CVE-2021-41035		 CWE-284 High
No
No
 10.2.4 Fix Pack 1 IF15 27.01.2022 SB2022012712
SB2022020177
SB2022021424
and 28 more
#VU59730 - Improper input validation
CVE-2022-21293		 CWE-20 Medium
No
No
 10.2.4 Fix Pack 1 IF15 18.01.2022 SB2022011840
SB2022011841
SB2022011931
and 95 more
#VU59731 - Improper input validation
CVE-2022-21294		 CWE-20 Medium
No
No
 10.2.4 Fix Pack 1 IF15 18.01.2022 SB2022011840
SB2022011841
SB2022011931
and 96 more
#VU59733 - Improper input validation
CVE-2022-21341		 CWE-20 Medium
No
No
 10.2.4 Fix Pack 1 IF15 18.01.2022 SB2022011840
SB2022011841
SB2022011931
and 96 more
#VU59734 - Improper input validation
CVE-2022-21248		 CWE-20 Low
No
No
 10.2.4 Fix Pack 1 IF15 18.01.2022 SB2022011840
SB2022011841
SB2022011931
and 95 more
#VU58977 - Deserialization of Untrusted Data
CVE-2021-4104		 CWE-502 Medium
No
No
 10.2.4 Fix Pack 1 IF15 15.12.2021 SB2021121507
SB2021121647
SB2021121720
and 119 more
#VU57487 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2021-35550		 CWE-300 Medium
No
No
 10.2.4 Fix Pack 1 IF15 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 102 more
#VU57495 - Improper input validation
CVE-2021-35578		 CWE-20 Medium
No
No
 10.2.4 Fix Pack 1 IF15 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 95 more
#VU57496 - Improper input validation
CVE-2021-35603		 CWE-20 Low
No
No
 10.2.4 Fix Pack 1 IF15 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 112 more
#VU54853 - Resource exhaustion
CVE-2021-36090		 CWE-400 Medium
No
No
 10.2.4 Fix Pack 1 IF15 14.07.2021 SB2021071408
SB2021080809
SB2021100411
and 70 more
#VU54852 - Resource exhaustion
CVE-2021-35517		 CWE-400 Medium
No
No
 10.2.4 Fix Pack 1 IF15 14.07.2021 SB2021071408
SB2021080809
SB2021100411
and 33 more
#VU14741 - Improper Validation of Certificate with Host Mismatch
CVE-2018-11775		 CWE-297 Low
No
No
 10.2.4 Fix Pack 1 IF15 11.09.2018 SB2018091104
SB2019112016
SB2022060812
and 4 more
#VU12354 - Permissions, Privileges, and Access Controls
CVE-2018-1417		 CWE-264 Low
No
No
 - 02.05.2018 SB2018050208
SB2018051601
SB2018052909
#VU10135 - Permissions, Privileges, and Access Controls
CVE-2018-2633		 CWE-264 Low
No
No
 - 22.01.2018 SB2018011711
SB2018012313
SB2018020903
and 30 more
#VU10131 - Permissions, Privileges, and Access Controls
CVE-2018-2603		 CWE-264 Low
No
No
 - 22.01.2018 SB2018011711
SB2018012313
SB2018020903
and 31 more
#VU10130 - Permissions, Privileges, and Access Controls
CVE-2018-2602		 CWE-264 Low
No
No
 - 22.01.2018 SB2018011711
SB2018012313
SB2018020903
and 28 more
#VU10125 - Exposure of sensitive information to an unauthorized actor
CVE-2018-2579		 CWE-200 Low
No
No
 - 22.01.2018 SB2018011711
SB2018012313
SB2018020903
and 29 more
#VU9128 - Deserialization of Untrusted Data
CVE-2017-7525		 CWE-502 High
Available
No
 10.2.4 Fix Pack 1 IF15 08.11.2017 SB2017110807
SB2017102005
SB2017120205
and 40 more


Showing elements 81 - 100 out of 104