Controller

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:controller:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductController (f7caac8f-c755-5142-8bd4-1c318504d2c1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-36326 vulnerable 2026-06-08 07:21:01.548428 IBM Controller information disclosure
LOW (3.7)
IBM Cognos Controller 11.0.0 through 11.0.1, and IBM Controller 11.1.0 through 11.1.1 could allow an attacker to obtain sensitive information due to the use of hardcoded cryptographic keys for signing session cookies.
Published: 2025-09-26T14:20:46.219Z
Updated: 2025-09-26T14:54:41.385Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36102 vulnerable 2026-06-08 07:21:00.986091 IBM Controller Validation Bypass
LOW (2.7)
IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 could allow a privileged user to bypass validation, passing user input into the application as trusted data, due to client-side enforcement of server-side security.
Published: 2025-12-08T21:30:29.480Z
Updated: 2025-12-09T16:05:50.159Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36017 vulnerable 2026-06-08 07:21:00.446785 IBM Controller Information Disclosure
MEDIUM (6.5)
IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 stores unencrypted sensitive information in environmental variables files which can be obtained by an authenticated user.
Published: 2025-12-08T21:37:10.807Z
Updated: 2025-12-09T16:05:34.777Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36015 vulnerable 2026-06-08 07:21:00.441598 IBM Controller Denial of Service
MEDIUM (6.5)
IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 could allow an authenticated user to cause a denial of service due to improper validation of a specified quantity size input.
Published: 2025-12-08T21:22:45.698Z
Updated: 2025-12-08T21:33:32.059Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-33111 vulnerable 2026-06-08 07:19:01.776025 IBM Controller Information Disclosure
MEDIUM (4.3)
IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 is vulnerable to creation of temporary files without atomic operations which may expose sensitive information to an authenticated user due to race condition attacks.
Published: 2025-12-08T21:28:37.212Z
Updated: 2025-12-09T16:05:55.300Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52902 vulnerable 2026-06-08 06:52:16.383979 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45084 vulnerable 2026-06-08 06:45:54.549331 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45081 vulnerable 2026-06-08 06:45:54.537326 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28777 vulnerable 2026-06-08 06:33:27.301213 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28776 vulnerable 2026-06-08 06:33:27.296149 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-39163 vulnerable 2026-06-08 05:47:18.257277 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.