Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:cognos_controller:11.0.1:*:*:*:*:*:*:*

part: a version: 11.0.1 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductCognos Controller (8e238403-9fc2-569f-aaa3-413fed55087f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-36326 vulnerable 2026-06-08 07:21:01.548046 IBM Controller information disclosure
LOW (3.7)
IBM Cognos Controller 11.0.0 through 11.0.1, and IBM Controller 11.1.0 through 11.1.1 could allow an attacker to obtain sensitive information due to the use of hardcoded cryptographic keys for signing session cookies.
Published: 2025-09-26T14:20:46.219Z
Updated: 2025-09-26T14:54:41.385Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-33079 vulnerable 2026-06-08 07:19:01.708822 IBM Controller information disclosure
MEDIUM (6.5)
IBM Controller 11.0.0, 11.0.1, and 11.1.0 application could allow an authenticated user to obtain sensitive credentials that may be inadvertently included within the source code.
Published: 2025-05-27T01:05:12.455Z
Updated: 2025-08-26T15:03:51.764Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45676 vulnerable 2026-06-08 06:48:08.875985 IBM Cognos Controller file upload
MEDIUM (4.3)
IBM Cognos Controller 11.0.0 and 11.0.1 could allow an authenticated user to upload insecure files, due to insufficient file type distinction.
Published: 2024-12-03T17:08:51.441Z
Updated: 2024-12-03T17:55:03.449Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41777 vulnerable 2026-06-08 06:43:55.160131 IBM Cognos Controller hard coded credentials
HIGH (7.5)
IBM Cognos Controller 11.0.0 and 11.0.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.
Published: 2024-12-03T17:10:06.403Z
Updated: 2024-12-03T17:49:50.964Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41776 vulnerable 2026-06-08 06:43:55.159668 IBM Cognos Controller cross-site request forgery
MEDIUM (6.5)
IBM Cognos Controller 11.0.0 and 11.0.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.
Published: 2024-12-03T17:11:15.554Z
Updated: 2024-12-03T17:55:03.583Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41775 vulnerable 2026-06-08 06:43:55.159239 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-40702 vulnerable 2026-06-08 06:43:53.039728 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-40691 vulnerable 2026-06-08 06:43:53.001587 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28778 vulnerable 2026-06-08 06:33:27.304049 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25037 vulnerable 2026-06-08 06:31:21.774024 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25036 vulnerable 2026-06-08 06:31:21.764682 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25035 vulnerable 2026-06-08 06:31:21.763643 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25020 vulnerable 2026-06-08 06:29:42.188857 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25019 vulnerable 2026-06-08 06:29:42.188263 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22363 vulnerable 2026-06-08 05:40:53.646848 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29892 vulnerable 2026-06-08 05:31:27.202370 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20455 vulnerable 2026-06-08 05:29:09.279345 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.