Known vulnerabilities in IBM Cognos Controller - page 4

Vendor: IBM Corporation
Software: IBM Cognos Controller
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cognos_controller:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 249
Public exploits: 13
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cognos Controller IBM Cognos Controller is affected by 249 known vulnerabilities: 2 critical, 30 high, 123 medium, 94 low Critical High Medium Low

Vulnerabilities (249)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU101320 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2024-41775		 CWE-327 Medium
No
No
 11.0.1.0.3 06.12.2024 SB2024120610
#VU88803 - Server-Side Request Forgery (SSRF)
CVE-2024-22329		 CWE-918 Medium
No
No
 11.0.1.0.3 18.04.2024 SB2024041812
SB2024042613
SB2024043016
and 67 more
#VU86992 - Allocation of Resources Without Limits or Throttling
CVE-2024-21634		 CWE-770 Medium
No
No
 11.0.1.0.3 04.03.2024 SB2024030419
SB2024031125
SB2024032143
and 18 more
#VU83267 - Improper input validation
CVE-2023-5676		 CWE-20 Low
No
No
 11.0.1.0.3 20.11.2023 SB2023112010
SB2023112011
SB2023112726
and 101 more
#VU82140 - Improper input validation
CVE-2023-22067		 CWE-20 Medium
No
No
 11.0.1.0.3 17.10.2023 SB2023101797
SB2023101924
SB2023101990
and 117 more
#VU82141 - Improper input validation
CVE-2023-22081		 CWE-20 Medium
No
No
 11.0.1.0.3 17.10.2023 SB2023101797
SB2023101798
SB2023101905
and 187 more
#VU72427 - Allocation of Resources Without Limits or Throttling
CVE-2023-24998		 CWE-770 Medium
Available
No
 11.0.1.0.3 20.02.2023 SB2023022046
SB2023022047
SB2023030917
and 203 more
#VU71288 - Improper input validation
CVE-2023-21830		 CWE-20 Medium
No
No
 11.0.1.0.3 17.01.2023 SB2023011784
SB2023011785
SB2023012377
and 112 more
#VU71289 - Improper input validation
CVE-2023-21843		 CWE-20 Low
No
No
 11.0.1.0.3 17.01.2023 SB2023011784
SB2023011785
SB2023011882
and 146 more
#VU65282 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-32215		 CWE-444 Medium
No
No
 11.0.1.0.3 13.07.2022 SB2022071338
SB2022071610
SB2022071611
and 54 more
#VU65280 - Security Features
CVE-2022-32222		 CWE-254 Medium
No
No
 11.0.1.0.3 13.07.2022 SB2022071338
SB2022081105
SB2022100401
and 10 more
#VU65278 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-32214		 CWE-444 Medium
No
No
 11.0.1.0.3 13.07.2022 SB2022071338
SB2022071610
SB2022071611
and 36 more
#VU65276 - Uncontrolled Search Path Element
CVE-2022-32223		 CWE-427 Low
Available
No
 11.0.1.0.3 13.07.2022 SB2022071338
SB2022080910
SB2022081105
and 9 more
#VU65275 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-32213		 CWE-444 Medium
No
No
 11.0.1.0.3 13.07.2022 SB2022071338
SB2022071610
SB2022071611
and 55 more
#VU61253 - Improper Certificate Validation
CVE-2021-22939		 CWE-295 Medium
No
No
 11.0.1.0.3 11.03.2022 SB2021081614
SB2022031104
SB2022060618
and 25 more
#VU59551 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-21824		 CWE-94 Medium
No
No
 11.0.1.0.3 12.01.2022 SB2022011216
SB2022041205
SB2022060315
and 39 more
#VU59549 - Improper Validation of Certificate with Host Mismatch
CVE-2021-44532		 CWE-297 Medium
No
No
 11.0.1.0.3 12.01.2022 SB2022011216
SB2022041522
SB2022042806
and 36 more
#VU59233 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-22959		 CWE-444 Medium
No
No
 11.0.1.0.3 05.01.2022 SB2022010523
SB2022010524
SB2022011841
and 43 more
#VU55560 - Use After Free
CVE-2021-22930		 CWE-416 High
No
No
 11.0.1.0.3 03.08.2021 SB2021080320
SB2021080324
SB2021080325
and 35 more
#VU52252 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-29425		 CWE-22 Low
No
No
 11.0.1.0.3 15.04.2021 SB2021041510
SB2021081922
SB2021093016
and 121 more


Showing elements 61 - 80 out of 249