Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:cognos_controller:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductCognos Controller (8e238403-9fc2-569f-aaa3-413fed55087f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-36326 vulnerable 2026-06-08 07:21:01.548317 IBM Controller information disclosure
LOW (3.7)
IBM Cognos Controller 11.0.0 through 11.0.1, and IBM Controller 11.1.0 through 11.1.1 could allow an attacker to obtain sensitive information due to the use of hardcoded cryptographic keys for signing session cookies.
Published: 2025-09-26T14:20:46.219Z
Updated: 2025-09-26T14:54:41.385Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36102 vulnerable 2026-06-08 07:21:00.986068 IBM Controller Validation Bypass
LOW (2.7)
IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 could allow a privileged user to bypass validation, passing user input into the application as trusted data, due to client-side enforcement of server-side security.
Published: 2025-12-08T21:30:29.480Z
Updated: 2025-12-09T16:05:50.159Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36015 vulnerable 2026-06-08 07:21:00.440444 IBM Controller Denial of Service
MEDIUM (6.5)
IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 could allow an authenticated user to cause a denial of service due to improper validation of a specified quantity size input.
Published: 2025-12-08T21:22:45.698Z
Updated: 2025-12-08T21:33:32.059Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-33111 vulnerable 2026-06-08 07:19:01.775283 IBM Controller Information Disclosure
MEDIUM (4.3)
IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 is vulnerable to creation of temporary files without atomic operations which may expose sensitive information to an authenticated user due to race condition attacks.
Published: 2025-12-08T21:28:37.212Z
Updated: 2025-12-09T16:05:55.300Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-33079 vulnerable 2026-06-08 07:19:01.706911 IBM Controller information disclosure
MEDIUM (6.5)
IBM Controller 11.0.0, 11.0.1, and 11.1.0 application could allow an authenticated user to obtain sensitive credentials that may be inadvertently included within the source code.
Published: 2025-05-27T01:05:12.455Z
Updated: 2025-08-26T15:03:51.764Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52902 vulnerable 2026-06-08 06:52:16.384549 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45084 vulnerable 2026-06-08 06:45:54.549456 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45081 vulnerable 2026-06-08 06:45:54.538273 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-40702 vulnerable 2026-06-08 06:43:53.041023 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28780 vulnerable 2026-06-08 06:33:27.306764 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28778 vulnerable 2026-06-08 06:33:27.304105 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28777 vulnerable 2026-06-08 06:33:27.301242 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28776 vulnerable 2026-06-08 06:33:27.299485 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25037 vulnerable 2026-06-08 06:31:21.785787 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47160 vulnerable 2026-06-08 06:14:24.119929 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40696 vulnerable 2026-06-08 06:11:04.329711 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40695 vulnerable 2026-06-08 06:11:04.322281 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38724 vulnerable 2026-06-08 06:08:18.726692 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28952 vulnerable 2026-06-08 06:02:36.697679 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-23474 vulnerable 2026-06-08 05:56:02.744976 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-39163 vulnerable 2026-06-08 05:47:18.258253 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22364 vulnerable 2026-06-08 05:40:53.650522 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22363 vulnerable 2026-06-08 05:40:53.647716 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20556 vulnerable 2026-06-08 05:29:09.464255 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20455 vulnerable 2026-06-08 05:29:09.279393 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20451 vulnerable 2026-06-08 05:29:09.274454 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20450 vulnerable 2026-06-08 05:29:09.271203 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4879 vulnerable 2026-06-08 05:26:41.123702 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4877 vulnerable 2026-06-08 05:26:41.122998 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4876 vulnerable 2026-06-08 05:26:41.122378 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4875 vulnerable 2026-06-08 05:26:41.121520 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4874 vulnerable 2026-06-08 05:26:41.118329 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4685 vulnerable 2026-06-08 05:26:40.689565 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4412 vulnerable 2026-06-08 05:13:57.135182 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4411 vulnerable 2026-06-08 05:13:57.134635 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4177 vulnerable 2026-06-08 05:13:56.919013 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4176 vulnerable 2026-06-08 05:13:56.918484 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4175 vulnerable 2026-06-08 05:13:56.918000 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4174 vulnerable 2026-06-08 05:13:56.917284 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4173 vulnerable 2026-06-08 05:13:56.916590 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4171 vulnerable 2026-06-08 05:13:56.914401 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4136 vulnerable 2026-06-08 05:13:56.867671 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.