Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:controller:11.0.0:*:*:*:*:*:*:*

part: a version: 11.0.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductController (f7caac8f-c755-5142-8bd4-1c318504d2c1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-1350 vulnerable 2026-10-13 12:22:06.717320 Multiple vulnerabilities in IBM Controller
MEDIUM (5.3)
IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.
Published: 2026-09-18T14:33:15.499Z
Updated: 2026-09-19T14:21:50.638Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36421 vulnerable 2026-10-13 12:21:50.256184 Multiple vulnerabilities in IBM Controller
MEDIUM (5.9)
IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 transmits data in clear text that could allow an attacker to obtain sensitive information using man in the middle techniques.
Published: 2026-09-18T15:44:27.068Z
Updated: 2026-09-19T14:21:50.487Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36178 vulnerable 2026-10-13 12:21:50.172428 Multiple vulnerabilities in IBM Controller
MEDIUM (5.4)
IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 could allow an authenticated user to bypass input validation due to improper validation of client-side input of file size.
Published: 2026-09-18T15:42:46.992Z
Updated: 2026-09-18T17:39:45.236Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-33079 vulnerable 2026-06-08 07:19:01.704039 IBM Controller information disclosure
MEDIUM (6.5)
IBM Controller 11.0.0, 11.0.1, and 11.1.0 application could allow an authenticated user to obtain sensitive credentials that may be inadvertently included within the source code.
Published: 2025-05-27T01:05:12.455Z
Updated: 2025-08-26T15:03:51.764Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41778 vulnerable 2026-06-08 06:43:55.162493 IBM Controller information disclosure
MEDIUM (5.3)
IBM Controller 11.0.0 through 11.0.1 and 11.1.0 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts.
Published: 2025-03-01T14:22:40.930Z
Updated: 2025-09-01T01:09:14.360Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28780 vulnerable 2026-06-08 06:33:27.305682 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47160 vulnerable 2026-06-08 06:14:24.114980 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-39163 vulnerable 2026-06-08 05:47:18.255464 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.