Known vulnerabilities in IBM Cognos Controller - page 2

Vendor: IBM Corporation
Software: IBM Cognos Controller
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cognos_controller:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 249
Public exploits: 13
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cognos Controller IBM Cognos Controller is affected by 249 known vulnerabilities: 2 critical, 30 high, 123 medium, 94 low Critical High Medium Low

Vulnerabilities (249)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU118198 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-54798		 CWE-59 Low
No
No
 11.0.1 FP7, 11.1.2 FP1 07.11.2025 SB2025110743
SB2025110755
SB2025112543
and 9 more
#VU114392 - Improper Handling of Unexpected Data Type
CVE-2025-7339		 CWE-241 Low
No
No
 11.0.1 FP7, 11.1.2 FP1 22.08.2025 SB2025082222
SB2025091525
SB2025091621
and 18 more
#VU112134 - Origin Validation Error
CVE-2025-30360		 CWE-346 Low
No
No
 11.0.1 FP7, 11.1.2 FP1 03.07.2025 SB2025070317
SB2025122323
SB2025122948
and 2 more
#VU109924 - Missing Origin Validation in WebSockets
CVE-2018-14732		 CWE-1385 Medium
No
No
 11.0.1 FP7, 11.1.2 FP1 29.05.2025 SB2018092126
SB2025122323
SB2025122948
and 2 more
#VU109856 - Unprotected Storage of Credentials
CVE-2025-33079		 CWE-256 Medium
No
No
 11.0.1.5, 11.1.0.4 27.05.2025 SB2025052750
#VU105377 - Weak Password Requirements
CVE-2024-41778		 CWE-521 Low
No
No
 11.0.1.4, 11.1.0.2 06.03.2025 SB2025030606
#VU101895 - Inefficient Regular Expression Complexity
CVE-2024-52798		 CWE-1333 Low
No
No
 11.0.1.4, 11.1.0.2 23.12.2024 SB2024122305
SB2024122309
SB2025011306
and 45 more
#VU98760 - Improper input validation
CVE-2024-47764		 CWE-20 Low
No
No
 11.0.1 FP7, 11.1.2 FP1 17.10.2024 SB2024101722
SB20241022349
SB2024103080
and 35 more
#VU98132 - Inefficient Regular Expression Complexity
CVE-2024-45296		 CWE-1333 Low
No
No
 11.0.1.4, 11.1.0.2 08.10.2024 SB2024100822
SB2024100823
SB2024100826
and 87 more
#VU98025 - Resource exhaustion
CVE-2024-47554		 CWE-400 Medium
No
No
 11.0.1.4, 11.1.0.2 03.10.2024 SB2024100352
SB2024100421
SB2024101007
and 133 more
#VU97705 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-47068		 CWE-79 Low
No
No
 11.0.1 FP7, 11.1.2 FP1 25.09.2024 SB2024092534
SB20241022349
SB2025011306
and 3 more
#VU97574 - Uncontrolled Recursion
CVE-2024-7254		 CWE-674 Medium
No
No
 11.0.1.4, 11.1.0.2 19.09.2024 SB2024091904
SB2024100103
SB2024101050
and 90 more
#VU96642 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43788		 CWE-79 Low
No
No
 11.0.1 FP7, 11.1.2 FP1 30.08.2024 SB2024083026
SB2024100824
SB2024100825
and 21 more
#VU96019 - Resource exhaustion
CVE-2024-38808		 CWE-400 Medium
No
No
 11.0.1.4, 11.1.0.2 14.08.2024 SB2024081480
SB2024092018
SB2024100315
and 24 more
#VU92406 - Incorrect Regular Expression
CVE-2024-4067		 CWE-185 Medium
No
No
 11.0.1 FP7, 11.1.2 FP1 20.06.2024 SB20240620121
SB2024062832
SB2024070501
and 41 more
#VU87614 - Server-Side Request Forgery (SSRF)
CVE-2024-22259		 CWE-918 Medium
No
No
 11.0.1.4, 11.1.0.2 19.03.2024 SB2024031918
SB2024040207
SB2024041660
and 39 more
#VU86695 - Server-Side Request Forgery (SSRF)
CVE-2024-22243		 CWE-918 Medium
Available
No
 11.0.1.4, 11.1.0.2 21.02.2024 SB2024022140
SB2024030406
SB2024030529
and 45 more
#VU86355 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
CVE-2017-5644		 CWE-776 Low
No
No
 11.0.1 FP7, 11.1.2 FP1 13.02.2024 SB2024021305
SB2024022312
SB2024022724
and 5 more
#VU86352 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2014-3574		 CWE-611 Medium
No
No
 11.0.1 FP7, 11.1.2 FP1 13.02.2024 SB2024021305
SB2024022312
SB2014090409
and 2 more
#VU86349 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2014-3529		 CWE-611 Medium
No
No
 11.0.1 FP7, 11.1.2 FP1 13.02.2024 SB2024021305
SB2024022312
SB2014090409
and 2 more


Showing elements 21 - 40 out of 249