IBM Cognos Controller

• CVE-2025-36102 Low 2.7 IBM Controller Validation Bypass 0.2%
• CVE-2025-33111 Medium 4.3 IBM Controller Information Disclosure 0.2%
• CVE-2025-36015 Medium 6.5 IBM Controller Denial of Service 0.3%
• CVE-2025-36326 Low 3.7 IBM Controller information disclosure 0.2%
• CVE-2025-33079 Medium 6.5 IBM Controller information disclosure 0.3%
• CVE-2022-39163 Medium 4.7 IBM Cognos Controller HTTP response smuggling 0.2%
• CVE-2023-47160 High 8.2 IBM Cognos Controller XML external entity injection 0.5%
• CVE-2024-28777 High 8.8 IBM Cognos Controller code execution 0.6%
• CVE-2024-28776 Medium 5.4 IBM Cognos Controller cross-site scripting 0.2%
• CVE-2024-28780 Medium 5.9 IBM Cognos Controller information disclosure 0.2%
• CVE-2024-45081 Medium 6.5 IBM Cognos Controller incorrect authorization 0.3%
• CVE-2024-45084 High 8.0 IBM Cognos Controller CSV injection 0.4%
• CVE-2024-52902 High 8.8 IBM Cognos Controller information disclosure 0.4%
• CVE-2022-22363 Medium 4.3 IBM Cognos Controller information disclosure 0.8%
• CVE-2021-20455 Low 3.7 IBM Cognos Controller information disclosure 0.5%
• CVE-2024-40702 High 8.2 IBM Cognos Controller improper certificate validation 0.3%
• CVE-2024-28778 Medium 6.5 IBM Cognos Controller information disclosure 0.5%
• CVE-2024-25037 Medium 4.3 IBM Cognos Controller information disclosure 0.6%
• CVE-2024-41775 Medium 5.9 IBM Cognos Controller information disclosure 0.2%
• CVE-2024-25020 Medium 5.5 IBM Cognos Controller file upload 0.3%
• CVE-2024-41776 Medium 6.5 IBM Cognos Controller cross-site request forgery 0.2%
• CVE-2024-41777 High 7.5 IBM Cognos Controller hard coded credentials 0.3%
• CVE-2024-45676 Medium 4.3 IBM Cognos Controller file upload 0.2%
• CVE-2024-25036 Medium 4.3 IBM Cognos Controller authentication bypass 0.2%
• CVE-2024-25035 Medium 5.3 IBM Cognos Controller information disclosure 0.3%
• CVE-2024-40691 High 8.0 IBM Cognos Controller file upload 0.4%
• CVE-2024-25019 Medium 5.5 IBM Cognos Controller file upload 0.3%
• CVE-2021-29892 Medium 5.9 IBM Cognos Controller information disclosure 0.3%
• CVE-2023-40695 Medium 6.3 IBM Cognos Controller session fixation 0.4%
• CVE-2021-20451 Medium 6.0 IBM Cognos Controller SQL injection 0.5%
• CVE-2022-22364 Medium 5.3 IBM Cognos Controller security bypass 0.5%
• CVE-2023-28952 Medium 5.3 IBM Cognos Controller log injection 0.4%
• CVE-2023-38724 Medium 6.3 IBM Cognos Controller SQL injection 0.5%
• CVE-2023-40696 Medium 5.9 IBM Cognos Controller information disclosure 0.3%
• CVE-2021-20556 Medium 5.3 IBM Cognos Controller information disclosure 0.5%
• CVE-2023-23474 Low 3.7 IBM Cognos Controller information disclosure 0.4%
• CVE-2021-20450 Medium 4.3 IBM Cognos Controller information disclosure 0.4%
• CVE-2020-4874 Medium 5.9 IBM Cognos Controller information disclosure 0.3%
• CVE-2020-4879 High 7.3 IBM Cognos Controller 10.4.0, 10.4.1, and 10.4.2 could allow a remote attacker to bypass security restrictions, caused by improper validation of authentication cookies. IBM X-Force ID: 190847. 1.5%
• CVE-2020-4877 High 7.3 IBM Cognos Controller 10.4.0, 10.4.1, and 10.4.2 could be vulnerable to unauthorized modifications by using public fields in public classes. IBM X-Force ID: 190843. 0.9%
• CVE-2020-4876 High 7.1 IBM Cognos Controller 10.4.0, 10.4.1, and 10.4.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose s 1.7%
• CVE-2020-4875 High 7.1 IBM Cognos Controller 10.4.0, 10.4.1, and 10.4.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose s 1.7%
• CVE-2020-4685 High 8.0 A low level user of IBM Cognos Controller 10.3.0, 10.3.1, 10.4.0, 10.4.1, and 10.4.2 who has Administration rights to the server where the application is installed, can escalate their privilege from L 1.4%