Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:controller:11.1.0:*:*:*:*:*:*:*

part: a version: 11.1.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductController (f7caac8f-c755-5142-8bd4-1c318504d2c1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-5065 vulnerable 2026-06-08 08:07:02.952113 IBM Controller is affected by vulnerabilities
HIGH (8.8)
IBM Controller 11.0.1, 11.1.0, 11.1.1, and 11.1.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.
Published: 2026-05-27T12:56:54.827Z
Updated: 2026-05-29T15:34:26.194Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36326 vulnerable 2026-06-08 07:21:01.548181 IBM Controller information disclosure
LOW (3.7)
IBM Cognos Controller 11.0.0 through 11.0.1, and IBM Controller 11.1.0 through 11.1.1 could allow an attacker to obtain sensitive information due to the use of hardcoded cryptographic keys for signing session cookies.
Published: 2025-09-26T14:20:46.219Z
Updated: 2025-09-26T14:54:41.385Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36102 vulnerable 2026-06-08 07:21:00.985676 IBM Controller Validation Bypass
LOW (2.7)
IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 could allow a privileged user to bypass validation, passing user input into the application as trusted data, due to client-side enforcement of server-side security.
Published: 2025-12-08T21:30:29.480Z
Updated: 2025-12-09T16:05:50.159Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36017 vulnerable 2026-06-08 07:21:00.446593 IBM Controller Information Disclosure
MEDIUM (6.5)
IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 stores unencrypted sensitive information in environmental variables files which can be obtained by an authenticated user.
Published: 2025-12-08T21:37:10.807Z
Updated: 2025-12-09T16:05:34.777Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36015 vulnerable 2026-06-08 07:21:00.436268 IBM Controller Denial of Service
MEDIUM (6.5)
IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 could allow an authenticated user to cause a denial of service due to improper validation of a specified quantity size input.
Published: 2025-12-08T21:22:45.698Z
Updated: 2025-12-08T21:33:32.059Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-33111 vulnerable 2026-06-08 07:19:01.773532 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-33079 vulnerable 2026-06-08 07:19:01.705957 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52902 vulnerable 2026-06-08 06:52:16.381866 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45084 vulnerable 2026-06-08 06:45:54.549479 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45081 vulnerable 2026-06-08 06:45:54.539094 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41778 vulnerable 2026-06-08 06:43:55.163475 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-40702 vulnerable 2026-06-08 06:43:53.039526 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28780 vulnerable 2026-06-08 06:33:27.306621 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28778 vulnerable 2026-06-08 06:33:27.301724 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28777 vulnerable 2026-06-08 06:33:27.301093 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28776 vulnerable 2026-06-08 06:33:27.293562 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25037 vulnerable 2026-06-08 06:31:21.773813 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47160 vulnerable 2026-06-08 06:14:24.118673 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-39163 vulnerable 2026-06-08 05:47:18.256728 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22363 vulnerable 2026-06-08 05:40:53.645146 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20455 vulnerable 2026-06-08 05:29:09.278221 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.