Known vulnerabilities in IBM Cognos Controller - page 3

Vendor: IBM Corporation
Software: IBM Cognos Controller
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cognos_controller:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 249
Public exploits: 13
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cognos Controller IBM Cognos Controller is affected by 249 known vulnerabilities: 2 critical, 30 high, 123 medium, 94 low Critical High Medium Low

Vulnerabilities (249)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU101323 - Use of Hard-coded Credentials
CVE-2024-41777		 CWE-798 Medium
No
No
 11.0.1.0.3 06.12.2024 SB2024120610
#VU101322 - Cross-Site Request Forgery (CSRF)
CVE-2024-41776		 CWE-352 Medium
No
No
 11.0.1.0.3 06.12.2024 SB2024120610
#VU101321 - Unrestricted Upload of File with Dangerous Type
CVE-2024-25020		 CWE-434 Low
No
No
 11.0.1.0.3 06.12.2024 SB2024120610
#VU98498 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-28168		 CWE-611 Medium
No
No
 11.0.1.4, 11.1.0.2 14.10.2024 SB2024101462
SB2024101465
SB2024112829
and 18 more
#VU96018 - Improper input validation
CVE-2024-38809		 CWE-20 Medium
No
No
 11.0.1.4, 11.1.0.2 14.08.2024 SB2024081479
SB2024091920
SB2024100804
and 26 more
#VU93883 - Improper input validation
CVE-2024-37372		 CWE-20 Low
No
No
 11.0.1.4, 11.1.0.2 09.07.2024 SB2024070937
SB20240717120
SB2024072232
and 7 more
#VU93882 - Permissions, Privileges, and Access Controls
CVE-2024-22018		 CWE-264 Low
No
No
 11.0.1.4, 11.1.0.2 09.07.2024 SB2024070937
SB20240717120
SB2024072232
and 15 more
#VU93881 - Permissions, Privileges, and Access Controls
CVE-2024-36137		 CWE-264 Low
No
No
 11.0.1.4, 11.1.0.2 09.07.2024 SB2024070937
SB20240717120
SB2024072232
and 23 more
#VU93880 - Server-Side Request Forgery (SSRF)
CVE-2024-22020		 CWE-918 Medium
No
No
 11.0.1.4, 11.1.0.2 09.07.2024 SB2024070937
SB2024071636
SB20240717119
and 30 more
#VU93879 - Command injection
CVE-2024-36138		 CWE-77 Medium
No
No
 11.0.1.4, 11.1.0.2 09.07.2024 SB2024070937
SB2024071636
SB20240717119
and 12 more
#VU89801 - Server-Side Request Forgery (SSRF)
CVE-2024-22262		 CWE-918 Medium
No
No
 11.0.1.4, 11.1.0.2 24.05.2024 SB2024052420
SB2024052423
SB2024052708
and 76 more
#VU88802 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-22354		 CWE-611 High
No
No
 11.0.1.0.3 18.04.2024 SB2024041812
SB2024042628
SB2024050920
and 66 more
#VU88462 - Command injection
CVE-2024-27980		 CWE-77 Medium
No
No
 11.0.1.4, 11.1.0.2 11.04.2024 SB2024041122
SB2024041155
SB2024041156
and 20 more
#VU88173 - Resource exhaustion
CVE-2023-51775		 CWE-400 Medium
No
No
 11.0.1.0.3 05.04.2024 SB2024040525
SB2024041129
SB2024041130
and 83 more
#VU83241 - Information Exposure Through Log Files
CVE-2023-44483		 CWE-532 Medium
No
No
 11.0.1.0.3 17.11.2023 SB2023111724
SB2023111747
SB2023120143
and 76 more
#VU59550 - Improper Certificate Validation
CVE-2021-44533		 CWE-295 Medium
No
No
 11.0.1.0.3 12.01.2022 SB2022011216
SB2022041522
SB2022042517
and 36 more
#VU59548 - Improper Certificate Validation
CVE-2021-44531		 CWE-295 Medium
No
No
 11.0.1.0.3 12.01.2022 SB2022011216
SB2022032010
SB2022041522
and 35 more
#VU59234 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-22960		 CWE-444 Medium
No
No
 11.0.1.0.3 05.01.2022 SB2022010523
SB2022010524
SB2022042806
and 40 more
#VU54625 - Incorrect Default Permissions
CVE-2021-22921		 CWE-276 Low
No
No
 11.0.1.0.3 08.07.2021 SB2021100417
SB2022031104
SB2022060315
and 7 more
#VU54624 - Out-of-bounds read
CVE-2021-22918		 CWE-125 Medium
No
No
 11.0.1.0.3 08.07.2021 SB2021070819
SB2021072009
SB2021081123
and 40 more


Showing elements 41 - 60 out of 249