Controller (Ibm) - vulnerabilities (CVEs)

24 CVEs, 0 in the last 30 days, 9 known versions, newest CVE from 2026-09-18. Vendor: Ibm.

CVEs of Controller

CVE-2025-36421 - CVSS 5.9 (medium), 2026-09-18: IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 transmits data in clear text that could allow an attacker to obtain sensitive…
CVE-2025-36178 - CVSS 5.4 (medium), 2026-09-18: IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 could allow an authenticated user to bypass input validation due to improper…
CVE-2025-1350 - CVSS 5.3 (medium), 2026-09-18: IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 could allow a remote attacker to obtain sensitive information when a detailed…
CVE-2026-5065 - CVSS 8.8 (high), 2026-05-27: IBM Controller 11.0.1, 11.1.0, 11.1.1, and 11.1.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound…
CVE-2025-36015 - CVSS 6.5 (medium), 2025-12-08: IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 could allow an authenticated user to cause a denial of service due to…
CVE-2025-33111 - CVSS 4.3 (medium), 2025-12-08: IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 is vulnerable to creation of temporary files without atomic…
CVE-2025-36102 - CVSS 2.7 (low), 2025-12-08: IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 could allow a privileged user to bypass validation, passing user…
CVE-2025-36017 - CVSS 6.5 (medium), 2025-12-08: IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 stores unencrypted sensitive information in environmental variables…
CVE-2025-36326 - CVSS 7.5 (high), 2025-09-26: IBM Cognos Controller 11.0.0 through 11.0.1, and IBM Controller 11.1.0 through 11.1.1 could allow an attacker to obtain sensitive information due to the use…
CVE-2025-33079 - CVSS 6.5 (medium), 2025-05-27: IBM Controller 11.0.0, 11.0.1, and 11.1.0 application could allow an authenticated user to obtain sensitive credentials that may be inadvertently included…
CVE-2022-39163 - CVSS 4.7 (medium), 2025-03-26: IBM Cognos Controller 11.0.0 through 11.1.0 is vulnerable to a Client-Side Desync (CSD) attack where an attacker could exploit a desynchronized browser…
CVE-2024-41778 - CVSS 6.5 (medium), 2025-03-01: IBM Controller 11.0.0 through 11.0.1 and 11.1.0 does not require that users should have strong passwords by default, which makes it easier for attackers to…
CVE-2023-47160 - CVSS 8.2 (high), 2025-02-19: IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML…
CVE-2024-28780 - CVSS 5.9 (medium), 2025-02-19: IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 Rich Client uses weaker than expected cryptographic algorithms that could allow an…
CVE-2024-45084 - CVSS 8 (high), 2025-02-19: IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 could allow an authenticated attacker to conduct formula injection. An attacker…
CVE-2024-45081 - CVSS 6.5 (medium), 2025-02-19: IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 could allow an authenticated user to modify restricted content due to incorrect…
CVE-2024-28777 - CVSS 8.8 (high), 2025-02-19: IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 is vulnerable to unrestricted deserialization. This vulnerability allows users to…
CVE-2024-28776 - CVSS 5.4 (medium), 2025-02-19: IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed…
CVE-2024-52902 - CVSS 8.8 (high), 2025-02-19: IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 client application contains hard coded database passwords in source code which could…
CVE-2024-40702 - CVSS 8.2 (high), 2025-01-07: IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow an unauthorized user to obtain valid tokens to gain access to protected…
CVE-2024-28778 - CVSS 6.5 (medium), 2025-01-07: IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 is vulnerable to exposure of Artifactory API keys. This vulnerability allows users to…
CVE-2024-25037 - CVSS 4.3 (medium), 2025-01-07: IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow a remote attacker to obtain sensitive information when a stack trace is…
CVE-2022-22363 - CVSS 4.3 (medium), 2025-01-07: IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow a remote attacker to obtain sensitive information when a detailed technical…
CVE-2021-20455 - CVSS 3.7 (low), 2025-01-07: IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow a remote attacker to obtain sensitive information when a detailed technical…