IBM Controller 11.1.1
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:controller:11.1.1:*:*:*:*:*:*:*
part: a version: 11.1.1 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Controller (f7caac8f-c755-5142-8bd4-1c318504d2c1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-5065 |
vulnerable | 2026-06-08 08:07:02.953470 |
IBM Controller is affected by vulnerabilities
HIGH (8.8)
IBM Controller 11.0.1, 11.1.0, 11.1.1, and 11.1.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.
Published: 2026-05-27T12:56:54.827Z
Updated: 2026-05-29T15:34:26.194Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36326 |
vulnerable | 2026-06-08 07:21:01.548290 |
IBM Controller information disclosure
LOW (3.7)
IBM Cognos Controller 11.0.0 through 11.0.1, and IBM Controller 11.1.0 through 11.1.1 could allow an attacker to obtain sensitive information due to the use of hardcoded cryptographic keys for signing session cookies.
Published: 2025-09-26T14:20:46.219Z
Updated: 2025-09-26T14:54:41.385Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36102 |
vulnerable | 2026-06-08 07:21:00.985800 |
IBM Controller Validation Bypass
LOW (2.7)
IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 could allow a privileged user to bypass validation, passing user input into the application as trusted data, due to client-side enforcement of server-side security.
Published: 2025-12-08T21:30:29.480Z
Updated: 2025-12-09T16:05:50.159Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36017 |
vulnerable | 2026-06-08 07:21:00.446756 |
IBM Controller Information Disclosure
MEDIUM (6.5)
IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 stores unencrypted sensitive information in environmental variables files which can be obtained by an authenticated user.
Published: 2025-12-08T21:37:10.807Z
Updated: 2025-12-09T16:05:34.777Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36015 |
vulnerable | 2026-06-08 07:21:00.437041 |
IBM Controller Denial of Service
MEDIUM (6.5)
IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 could allow an authenticated user to cause a denial of service due to improper validation of a specified quantity size input.
Published: 2025-12-08T21:22:45.698Z
Updated: 2025-12-08T21:33:32.059Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-33111 |
vulnerable | 2026-06-08 07:19:01.774395 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.