Cognos Controller
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:cognos_controller:11.0.1:fix_pack_3:*:*:*:*:*:*
part: a version: 11.0.1 update: fix_pack_3
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Cognos Controller (8e238403-9fc2-569f-aaa3-413fed55087f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-52902 |
vulnerable | 2026-06-08 06:52:16.383309 |
IBM Cognos Controller information disclosure
HIGH (8.8)
IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 client application contains hard coded database passwords in source code which could be used for unauthorized access to the system.
Published: 2025-02-19T14:50:24.376Z
Updated: 2025-08-15T14:42:21.022Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45084 |
vulnerable | 2026-06-08 06:45:54.549188 |
IBM Cognos Controller CSV injection
HIGH (8)
IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0
could allow an authenticated attacker to conduct formula injection. An attacker could execute arbitrary commands on the system, caused by improper validation of file contents.
Published: 2025-02-19T15:24:03.216Z
Updated: 2025-09-29T17:55:20.228Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45081 |
vulnerable | 2026-06-08 06:45:54.536240 |
IBM Cognos Controller incorrect authorization
MEDIUM (6.5)
IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0
could allow an authenticated user to modify restricted content due to incorrect authorization checks.
Published: 2025-02-19T15:37:09.745Z
Updated: 2025-08-15T14:29:59.475Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28777 |
vulnerable | 2026-06-08 06:33:27.301178 |
IBM Cognos Controller code execution
HIGH (8.8)
IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0
is vulnerable to unrestricted deserialization. This vulnerability allows users to execute arbitrary code, escalate privileges, or cause denial of service attacks by exploiting the unrestricted deserialization of types in the application.
Published: 2025-02-19T16:04:19.920Z
Updated: 2025-08-15T14:37:44.315Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28776 |
vulnerable | 2026-06-08 06:33:27.295244 |
IBM Cognos Controller cross-site scripting
MEDIUM (5.4)
IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0
is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-02-19T16:02:08.425Z
Updated: 2025-08-15T14:38:38.702Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.