Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:cognos_controller:11.0.0:*:*:*:*:*:*:*

part: a version: 11.0.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductCognos Controller (8e238403-9fc2-569f-aaa3-413fed55087f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-36326 vulnerable 2026-06-08 07:21:01.546582 IBM Controller information disclosure
LOW (3.7)
IBM Cognos Controller 11.0.0 through 11.0.1, and IBM Controller 11.1.0 through 11.1.1 could allow an attacker to obtain sensitive information due to the use of hardcoded cryptographic keys for signing session cookies.
Published: 2025-09-26T14:20:46.219Z
Updated: 2025-09-26T14:54:41.385Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36102 vulnerable 2026-06-08 07:21:00.985921 IBM Controller Validation Bypass
LOW (2.7)
IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 could allow a privileged user to bypass validation, passing user input into the application as trusted data, due to client-side enforcement of server-side security.
Published: 2025-12-08T21:30:29.480Z
Updated: 2025-12-09T16:05:50.159Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36015 vulnerable 2026-06-08 07:21:00.438105 IBM Controller Denial of Service
MEDIUM (6.5)
IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 could allow an authenticated user to cause a denial of service due to improper validation of a specified quantity size input.
Published: 2025-12-08T21:22:45.698Z
Updated: 2025-12-08T21:33:32.059Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-33111 vulnerable 2026-06-08 07:19:01.774441 IBM Controller Information Disclosure
MEDIUM (4.3)
IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 is vulnerable to creation of temporary files without atomic operations which may expose sensitive information to an authenticated user due to race condition attacks.
Published: 2025-12-08T21:28:37.212Z
Updated: 2025-12-09T16:05:55.300Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-33079 vulnerable 2026-06-08 07:19:01.707945 IBM Controller information disclosure
MEDIUM (6.5)
IBM Controller 11.0.0, 11.0.1, and 11.1.0 application could allow an authenticated user to obtain sensitive credentials that may be inadvertently included within the source code.
Published: 2025-05-27T01:05:12.455Z
Updated: 2025-08-26T15:03:51.764Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52902 vulnerable 2026-06-08 06:52:16.382505 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45676 vulnerable 2026-06-08 06:48:08.875220 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45084 vulnerable 2026-06-08 06:45:54.549140 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45081 vulnerable 2026-06-08 06:45:54.535647 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41777 vulnerable 2026-06-08 06:43:55.159974 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41776 vulnerable 2026-06-08 06:43:55.159634 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41775 vulnerable 2026-06-08 06:43:55.159112 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-40702 vulnerable 2026-06-08 06:43:53.039697 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-40691 vulnerable 2026-06-08 06:43:53.000829 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28778 vulnerable 2026-06-08 06:33:27.301767 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28777 vulnerable 2026-06-08 06:33:27.301138 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28776 vulnerable 2026-06-08 06:33:27.294609 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25037 vulnerable 2026-06-08 06:31:21.773871 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25036 vulnerable 2026-06-08 06:31:21.764546 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25035 vulnerable 2026-06-08 06:31:21.762879 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25020 vulnerable 2026-06-08 06:29:42.188811 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25019 vulnerable 2026-06-08 06:29:42.187498 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40696 vulnerable 2026-06-08 06:11:04.329940 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40695 vulnerable 2026-06-08 06:11:04.329242 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38724 vulnerable 2026-06-08 06:08:18.725941 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28952 vulnerable 2026-06-08 06:02:36.696699 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-23474 vulnerable 2026-06-08 05:56:02.744074 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22364 vulnerable 2026-06-08 05:40:53.650490 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22363 vulnerable 2026-06-08 05:40:53.646166 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29892 vulnerable 2026-06-08 05:31:27.201663 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20556 vulnerable 2026-06-08 05:29:09.464231 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20455 vulnerable 2026-06-08 05:29:09.278368 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20451 vulnerable 2026-06-08 05:29:09.274429 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20450 vulnerable 2026-06-08 05:29:09.273851 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4874 vulnerable 2026-06-08 05:26:41.121068 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.