Known vulnerabilities in IBM Cognos Controller

Vendor: IBM Corporation
Software: IBM Cognos Controller
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cognos_controller:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 249
Public exploits: 13
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cognos Controller IBM Cognos Controller is affected by 249 known vulnerabilities: 2 critical, 30 high, 123 medium, 94 low Critical High Medium Low

Vulnerabilities (249)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123139 - Permissions, Privileges, and Access Controls
CVE-2015-1673		 CWE-264 High
No
No
 11.1.2 23.02.2026 SB2015051322
SB2026022344
#VU123138 - Cleartext Storage of Sensitive Information
CVE-2025-36017		 CWE-312 Medium
No
No
 11.1.2 23.02.2026 SB2026022344
#VU114067 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-41242		 CWE-22 Medium
No
No
 11.1.2 FP1 14.08.2025 SB2025081411
SB2025100743
SB2025110336
and 18 more
#VU113085 - Interpretation Conflict
CVE-2024-56339		 CWE-436 Medium
No
No
 11.0.1 FP7, 11.1.2 FP1 21.07.2025 SB2025072116
SB2025072130
SB2025072305
and 45 more
#VU112940 - Improper input validation
CVE-2025-30761		 CWE-20 Medium
No
No
 11.0.1 FP7 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 77 more
#VU112941 - Improper input validation
CVE-2025-30754		 CWE-20 Medium
No
No
 11.0.1 FP7 16.07.2025 SB2025071686
SB2025071692
SB2025071783
and 108 more
#VU112936 - Improper input validation
CVE-2025-50059		 CWE-20 High
No
No
 11.1.2 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 54 more
#VU112937 - Improper input validation
CVE-2025-30749		 CWE-20 High
No
No
 11.0.1 FP7 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 101 more
#VU112938 - Improper input validation
CVE-2025-50106		 CWE-20 High
No
No
 11.0.1 FP7 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 100 more
#VU112257 - Improper input validation
CVE-2025-31672		 CWE-20 Medium
No
No
 11.0.1 FP7, 11.1.2 FP1 04.07.2025 SB20250704104
SB2025070708
SB2025071664
and 23 more
#VU112135 - Exposed Dangerous Method or Function
CVE-2025-30359		 CWE-749 Low
No
No
 11.0.1 FP7, 11.1.2 FP1 03.07.2025 SB2025070317
SB2025122323
SB2026010825
and 1 more
#VU112130 - Heap-based Buffer Overflow
CVE-2025-2900		 CWE-122 High
No
No
 11.1.2 03.07.2025 SB2025070313
SB2025070316
SB2025070318
and 22 more
#VU107520 - Improper input validation
CVE-2025-21587		 CWE-20 Medium
No
No
 11.1.2 16.04.2025 SB20250416145
SB20250416146
SB20250416147
and 103 more
#VU107521 - Improper input validation
CVE-2025-30698		 CWE-20 Medium
No
No
 11.1.2 16.04.2025 SB20250416145
SB20250416146
SB20250416147
and 93 more
#VU100680 - Improper input validation
CVE-2024-38828		 CWE-20 Medium
No
No
 11.1.2 20.11.2024 SB2024112009
SB2025021262
SB2025040424
and 16 more
#VU100676 - Improper Authorization
CVE-2024-38827		 CWE-285 Medium
No
No
 11.1.2 19.11.2024 SB2024111987
SB2025012185
SB2025012188
and 30 more
#VU98795 - Security Features
CVE-2024-38820		 CWE-254 Medium
No
No
 11.1.2 17.10.2024 SB2024101781
SB2024112618
SB2024120428
and 40 more
#VU91688 - Key Management Errors
CVE-2024-31033		 CWE-320 Medium
No
No
 11.1.2 11.06.2024 SB2024061114
SB20240611172
SB2024081313
and 3 more
#VU62314 - Security Features
CVE-2022-22968		 CWE-254 Medium
Available
No
 11.1.2 14.04.2022 SB2022041405
SB2022042903
SB2022060324
and 31 more
#VU49517 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
CVE-2021-23926		 CWE-776 High
No
No
 11.0.1 FP7, 11.1.2 FP1 14.01.2021 SB2021011401
SB2022072039
SB2022081823
and 21 more


Showing elements 1 - 20 out of 249