Known vulnerabilities in IBM Cognos Controller - page 5

Vendor: IBM Corporation
Software: IBM Cognos Controller
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cognos_controller:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 249
Public exploits: 13
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cognos Controller IBM Cognos Controller is affected by 249 known vulnerabilities: 2 critical, 30 high, 123 medium, 94 low Critical High Medium Low

Vulnerabilities (249)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU101324 - Insufficient Type Distinction
CVE-2024-45676		 CWE-351 Low
No
No
 11.0.1.0.3 06.12.2024 SB2024120610
#VU101319 - Unrestricted Upload of File with Dangerous Type
CVE-2024-25019		 CWE-434 Low
No
No
 11.0.1.0.3 06.12.2024 SB2024120610
#VU101318 - Unrestricted Upload of File with Dangerous Type
CVE-2024-40691		 CWE-434 Medium
No
No
 11.0.1.0.3 06.12.2024 SB2024120610
#VU89343 - Resource exhaustion
CVE-2023-38264		 CWE-400 Medium
No
No
 11.0.1.0.3 10.05.2024 SB2024051027
SB2024051417
SB2024052007
and 70 more
#VU89220 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-30172		 CWE-835 Medium
No
No
 11.0.1.0.3 07.05.2024 SB2024050731
SB2024061019
SB20240611170
and 62 more
#VU89219 - Observable discrepancy
CVE-2024-30171		 CWE-203 Medium
No
No
 11.0.1.0.3 07.05.2024 SB2024050731
SB2024050734
SB2024061019
and 59 more
#VU89218 - Resource exhaustion
CVE-2024-29857		 CWE-400 Medium
No
No
 11.0.1.0.3 07.05.2024 SB2024050731
SB2024061019
SB20240611170
and 69 more
#VU88977 - Resource exhaustion
CVE-2024-25026		 CWE-400 Medium
No
No
 11.0.1.0.3 24.04.2024 SB2024042458
SB2024042525
SB2024042626
and 68 more
#VU88665 - Improper input validation
CVE-2024-21085		 CWE-20 Low
No
No
 11.0.1.0.3 17.04.2024 SB2024041764
SB2024041765
SB2024041796
and 125 more
#VU88666 - Improper input validation
CVE-2024-21011		 CWE-20 Low
No
No
 11.0.1.0.3 17.04.2024 SB2024041764
SB2024041765
SB2024041766
and 132 more
#VU88668 - Improper input validation
CVE-2024-21094		 CWE-20 Low
No
No
 11.0.1.0.3 17.04.2024 SB2024041764
SB2024041765
SB2024041766
and 126 more
#VU87831 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-27270		 CWE-79 Medium
No
No
 11.0.1.0.3 26.03.2024 SB2024032654
SB2024050220
SB2024050920
and 31 more
#VU87551 - Exposure of sensitive information to an unauthorized actor
CVE-2024-28849		 CWE-200 Low
No
No
 11.0.1.0.3 15.03.2024 SB2024031508
SB2024031517
SB2024040365
and 59 more
#VU85369 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-26159		 CWE-601 Low
No
No
 11.0.1.0.3 15.01.2024 SB2024011510
SB2024011517
SB2024011864
and 53 more
#VU78413 - Improper input validation
CVE-2023-22045		 CWE-20 Low
No
No
 11.0.1.0.3 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 155 more
#VU78414 - Improper input validation
CVE-2023-22049		 CWE-20 Low
No
No
 11.0.1.0.3 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 164 more
#VU65273 - Improper Check or Handling of Exceptional Conditions
CVE-2022-32212		 CWE-703 Medium
No
No
 11.0.1.0.3 13.07.2022 SB2022071338
SB2022071610
SB2022071611
and 48 more
#VU61669 - Exposure of sensitive information to an unauthorized actor
CVE-2022-0155		 CWE-200 Low
No
No
 11.0.1.0.3 28.03.2022 SB2022032840
SB2022032843
SB2022071505
and 32 more
#VU61668 - Exposure of sensitive information to an unauthorized actor
CVE-2022-0536		 CWE-200 Low
No
No
 11.0.1.0.3 28.03.2022 SB2022032841
SB2022032843
SB2022042561
and 27 more
#VU61254 - Use After Free
CVE-2021-22940		 CWE-416 Medium
No
No
 11.0.1.0.3 11.03.2022 SB2021081615
SB2022031104
SB2022060618
and 23 more


Showing elements 81 - 100 out of 249