Known vulnerabilities in IBM Cognos Controller - page 8

Vendor: IBM Corporation
Software: IBM Cognos Controller
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cognos_controller:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 249
Public exploits: 13
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cognos Controller IBM Cognos Controller is affected by 249 known vulnerabilities: 2 critical, 30 high, 123 medium, 94 low Critical High Medium Low

Vulnerabilities (249)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU77716 - Improper input validation
CVE-2018-1199		 CWE-20 Medium
No
No
 10.4.1.0.15, 10.4.2.0.2 27.06.2023 SB2023062703
SB2023102710
SB2021022238
and 1 more
#VU77715 - Use of Insufficiently Random Values
CVE-2019-3795		 CWE-330 Medium
No
No
 10.4.1.0.15, 10.4.2.0.2 27.06.2023 SB2023062703
#VU62400 - Improper input validation
CVE-2022-21496		 CWE-20 Medium
No
No
 10.4.1.0.15, 10.4.2.0.2 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 118 more
#VU62401 - Improper input validation
CVE-2022-21434		 CWE-20 Medium
No
No
 10.4.1.0.15, 10.4.2.0.2 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 111 more
#VU62402 - Improper input validation
CVE-2022-21443		 CWE-20 Low
No
No
 10.4.1.0.15, 10.4.2.0.2 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 109 more
#VU60870 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-39038		 CWE-451 Low
No
No
 10.4.1.0.15, 10.4.2.0.2 25.02.2022 SB2022022505
SB2022060710
SB2022062008
and 12 more
#VU59733 - Improper input validation
CVE-2022-21341		 CWE-20 Medium
No
No
 10.4.1.0.15, 10.4.2.0.2 18.01.2022 SB2022011840
SB2022011841
SB2022011931
and 96 more
#VU55059 - Improper input validation
CVE-2021-2432		 CWE-20 Low
No
No
 10.4.1.0.15, 10.4.2.0.2 20.07.2021 SB2021072054
SB2021083016
SB2021091525
and 31 more
#VU55057 - Improper input validation
CVE-2021-2388		 CWE-20 Medium
No
No
 10.4.1.0.15, 10.4.2.0.2 20.07.2021 SB2021072054
SB2021072055
SB2021072201
and 62 more
#VU55058 - Improper Verification of Cryptographic Signature
CVE-2021-2369		 CWE-347 Low
No
No
 10.4.1.0.15, 10.4.2.0.2 20.07.2021 SB2021072054
SB2021072055
SB2021072201
and 76 more
#VU50820 - Permissions, Privileges, and Access Controls
CVE-2021-22112		 CWE-264 Medium
No
No
 10.4.1.0.15, 10.4.2.0.2 22.02.2021 SB2021022207
SB2021022216
SB2021042314
and 8 more
#VU28463 - Use of Insufficiently Random Values
CVE-2020-5408		 CWE-330 Medium
No
No
 10.4.1.0.15, 10.4.2.0.2 01.06.2020 SB2020060107
SB2020102832
SB2020102833
and 13 more
#VU18957 - Credentials Management
CVE-2019-11272		 CWE-255 Low
No
No
 10.4.1.0.15, 10.4.2.0.2 02.07.2019 SB2019070206
SB2020032701
SB2023062703
and 1 more
#VU13500 - Exposure of sensitive information to an unauthorized actor
CVE-2018-11040		 CWE-200 Low
No
No
 10.4.1.0.15, 10.4.2.0.2 27.06.2018 SB2018062707
SB2023062703
SB2021022238
#VU13499 - Exposure of sensitive information to an unauthorized actor
CVE-2018-11039		 CWE-200 Low
No
No
 10.4.1.0.15, 10.4.2.0.2 26.06.2018 SB2018062707
SB2023062703
SB2021022238
#VU12650 - Improper input validation
CVE-2018-1257		 CWE-20 Medium
No
No
 10.4.1.0.15, 10.4.2.0.2 15.05.2018 SB2018051507
SB2023062703
SB2021022238
#VU12131 - Improper input validation
CVE-2018-1275		 CWE-20 High
No
No
 10.4.1.0.15, 10.4.2.0.2 24.04.2018 SB2018042419
SB2018101614
SB2018101615
and 5 more
#VU12008 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2016-9878		 CWE-22 Low
No
No
 10.4.1.0.15, 10.4.2.0.2 20.04.2018 SB2018042004
SB2023062703
SB2023102710
and 1 more
#VU11753 - Improper Privilege Management
CVE-2018-1272		 CWE-269 Low
No
No
 10.4.1.0.15, 10.4.2.0.2 11.04.2018 SB2018040804
SB2023062703
SB2023102710
and 5 more
#VU11616 - Improper input validation
CVE-2018-1270		 CWE-20 High
No
No
 10.4.1.0.15, 10.4.2.0.2 08.04.2018 SB2018040804
SB2023062703
SB2021022238


Showing elements 141 - 160 out of 249