Known vulnerabilities in IBM Cognos Controller - page 7

Vendor: IBM Corporation
Software: IBM Cognos Controller
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cognos_controller:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 249
Public exploits: 13
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cognos Controller IBM Cognos Controller is affected by 249 known vulnerabilities: 2 critical, 30 high, 123 medium, 94 low Critical High Medium Low

Vulnerabilities (249)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU86988 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2023-50312		 CWE-327 Low
No
No
 11.0.1.0.3 04.03.2024 SB2024030425
SB2024031819
SB2024032049
and 49 more
#VU85468 - Improper input validation
CVE-2024-20918		 CWE-20 Medium
No
No
 11.0.1.0.3 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 192 more
#VU85469 - Improper input validation
CVE-2024-20952		 CWE-20 Medium
No
No
 11.0.1.0.3 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 189 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 11.0.1.0.3 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 651 more
#VU79665 - Improper input validation
CVE-2023-38737		 CWE-20 Medium
No
No
 11.0.1.0.3 17.08.2023 SB2023081721
SB2023100203
SB2023100308
and 20 more
#VU76906 - Out-of-bounds read
CVE-2023-2597		 CWE-125 High
No
No
 11.0.1.0.3 05.06.2023 SB2023060525
SB2023060705
SB2023060930
and 86 more
#VU76601 - Deserialization of Untrusted Data
CVE-2016-1000027		 CWE-502 High
No
No
 10.4.1.0.15, 10.4.2.0.2 29.05.2023 SB2023052915
SB2023060816
SB2023062703
and 24 more
#VU75264 - Improper input validation
CVE-2023-21939		 CWE-20 Medium
Available
No
 11.0.1.0.3 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 179 more
#VU75265 - Improper input validation
CVE-2023-21938		 CWE-20 Low
No
No
 11.0.1.0.3 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 181 more
#VU75266 - Improper input validation
CVE-2023-21968		 CWE-20 Low
No
No
 11.0.1.0.3 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 179 more
#VU75267 - Improper input validation
CVE-2023-21937		 CWE-20 Low
No
No
 11.0.1.0.3 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 184 more
#VU75262 - Improper input validation
CVE-2023-21954		 CWE-20 Medium
No
No
 11.0.1.0.3 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 166 more
#VU67850 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-35256		 CWE-444 Medium
No
No
 11.0.1.0.3 03.10.2022 SB2022100347
SB2022100401
SB2022100402
and 50 more
#VU67849 - Use of Insufficiently Random Values
CVE-2022-35255		 CWE-330 Medium
No
No
 11.0.1.0.3 03.10.2022 SB2022100401
SB2022100402
SB2022100528
and 40 more
#VU59719 - Improper input validation
CVE-2022-21291		 CWE-20 Medium
No
No
 10.4.1.0.15, 10.4.2.0.2 18.01.2022 SB2022011840
SB2022011841
SB2022011931
and 67 more
#VU59720 - Improper input validation
CVE-2022-21305		 CWE-20 Medium
No
No
 10.4.1.0.15, 10.4.2.0.2 18.01.2022 SB2022011840
SB2022011841
SB2022011931
and 85 more
#VU59730 - Improper input validation
CVE-2022-21293		 CWE-20 Medium
No
No
 10.4.1.0.15, 10.4.2.0.2 18.01.2022 SB2022011840
SB2022011841
SB2022011931
and 95 more
#VU59731 - Improper input validation
CVE-2022-21294		 CWE-20 Medium
No
No
 10.4.1.0.15, 10.4.2.0.2 18.01.2022 SB2022011840
SB2022011841
SB2022011931
and 96 more
#VU59734 - Improper input validation
CVE-2022-21248		 CWE-20 Low
No
No
 10.4.1.0.15, 10.4.2.0.2 18.01.2022 SB2022011840
SB2022011841
SB2022011931
and 95 more
#VU11752 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2018-1271		 CWE-22 Low
No
No
 10.4.1.0.15, 10.4.2.0.2 11.04.2018 SB2018040804
SB2023062703
SB2023102710
and 2 more


Showing elements 121 - 140 out of 249