Known vulnerabilities in IBM Cognos Controller - page 6

Vendor: IBM Corporation
Software: IBM Cognos Controller
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cognos_controller:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 249
Public exploits: 13
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cognos Controller IBM Cognos Controller is affected by 249 known vulnerabilities: 2 critical, 30 high, 123 medium, 94 low Critical High Medium Low

Vulnerabilities (249)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU101326 - Authentication Bypass Using an Alternate Path or Channel
CVE-2024-25036		 CWE-288 Low
No
No
 11.0.1.0.3 06.12.2024 SB2024120610
#VU101317 - Exposure of sensitive information to an unauthorized actor
CVE-2024-25035		 CWE-200 Medium
No
No
 11.0.1.0.3 06.12.2024 SB2024120610
#VU101294 - Cleartext Transmission of Sensitive Information
CVE-2021-29892		 CWE-319 Medium
No
No
 11.0.1.0.3 05.12.2024 SB2024120610
#VU88136 - Resource exhaustion
CVE-2024-27268		 CWE-400 Medium
No
No
 11.0.1.0.3 04.04.2024 SB2024040437
SB2024050803
SB2024052003
and 40 more
#VU88123 - Resource exhaustion
CVE-2024-22353		 CWE-400 Medium
No
No
 11.0.1.0.3 04.04.2024 SB2024040423
SB2024050220
SB2024050801
and 31 more
#VU86625 - Resource exhaustion
CVE-2024-26308		 CWE-400 Medium
No
No
 11.0.1.0.3 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 138 more
#VU86624 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-25710		 CWE-835 Medium
No
No
 11.0.1.0.3 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 102 more
#VU85470 - Improper input validation
CVE-2024-20919		 CWE-20 Medium
No
No
 11.0.1.0.3 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 164 more
#VU85471 - Improper input validation
CVE-2024-20921		 CWE-20 Medium
No
No
 11.0.1.0.3 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 185 more
#VU85472 - Improper input validation
CVE-2024-20926		 CWE-20 Medium
No
No
 11.0.1.0.3 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 164 more
#VU85473 - Improper input validation
CVE-2024-20945		 CWE-20 Low
No
No
 11.0.1.0.3 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 177 more
#VU82583 - Observable discrepancy
CVE-2023-33850		 CWE-203 Medium
No
No
 11.0.1.0.3 31.10.2023 SB2023103131
SB2023111305
SB2023111407
and 106 more
#VU75260 - Improper input validation
CVE-2023-21930		 CWE-20 Medium
No
No
 11.0.1.0.3 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 191 more
#VU75261 - Improper input validation
CVE-2023-21967		 CWE-20 Medium
No
No
 11.0.1.0.3 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 189 more
#VU72404 - Incorrect Regular Expression
CVE-2023-24807		 CWE-185 Medium
No
No
 11.0.1.0.3 20.02.2023 SB2023022022
SB2023022020
SB2023030129
and 34 more
#VU72403 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-23936		 CWE-113 Medium
No
No
 11.0.1.0.3 20.02.2023 SB2023022022
SB2023022020
SB2023030129
and 35 more
#VU72400 - Permissions, Privileges, and Access Controls
CVE-2023-23920		 CWE-264 Low
No
No
 11.0.1.0.3 20.02.2023 SB2023022020
SB2023030129
SB2023030337
and 55 more
#VU72399 - Resource Management Errors
CVE-2023-23919		 CWE-399 Medium
No
No
 11.0.1.0.3 20.02.2023 SB2023022020
SB2023030129
SB2023030337
and 33 more
#VU72398 - Permissions, Privileges, and Access Controls
CVE-2023-23918		 CWE-264 Medium
No
No
 11.0.1.0.3 20.02.2023 SB2023022020
SB2023030129
SB2023030337
and 48 more
#VU57498 - Improper input validation
CVE-2021-22931		 CWE-20 High
No
No
 11.0.1.0.3 19.10.2021 SB2021101945
SB2022020113
SB2022031104
and 28 more


Showing elements 101 - 120 out of 249