GCVE - cpe:2.3:a:ibm:cognos_controller:10.2.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:cognos_controller:10.2.1:*:*:*:*:*:*:*

part: a version: 10.2.1 update: *

Vendor	Ibm (`177c0602-9232-5933-8f2f-9d22f079d22d`)
Product	Cognos Controller (`8e238403-9fc2-569f-aaa3-413fed55087f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2019-4177`	vulnerable	2026-06-08 05:13:56.919070	Details available MEDIUM (4) IBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1, and 10.4.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 158882. Published: 2019-06-17T15:10:22.951Z Updated: 2024-09-17T01:16:26.369Z Open on db.gcve.eu Reference links http://www.ibm.com/support/docview.wss?uid=ibm10886913 https://exchange.xforce.ibmcloud.com/vulnerabilities/158882	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-4176`	vulnerable	2026-06-08 05:13:56.918535	Details available MEDIUM (5.3) IBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1, and 10.4.0 could allow a remote attacker to bypass security restrictions, caused by an error related to insecure HTTP Methods. An attacker could exploit this vulnerability to gain access to the system. IBM X-Force ID: 158881. Published: 2019-06-17T15:10:22.914Z Updated: 2024-09-16T16:38:19.205Z Open on db.gcve.eu Reference links http://www.ibm.com/support/docview.wss?uid=ibm10886913 https://exchange.xforce.ibmcloud.com/vulnerabilities/158881	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-4174`	vulnerable	2026-06-08 05:13:56.917338	Details available MEDIUM (4) IBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1, and 10.4.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 158879. Published: 2019-06-17T15:10:22.875Z Updated: 2024-09-16T17:58:11.800Z Open on db.gcve.eu Reference links http://www.ibm.com/support/docview.wss?uid=ibm10886913 https://exchange.xforce.ibmcloud.com/vulnerabilities/158879	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-4173`	vulnerable	2026-06-08 05:13:56.916652	Details available MEDIUM (6.5) IBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1, and 10.4.0 could allow a remote attacker to obtain sensitive information, caused by a flaw in the HTTP OPTIONS method, aka Optionsbleed. By sending an OPTIONS HTTP request, a remote attacker could exploit this vulnerability to read secret data from process memory and obtain sensitive information. IBM X-Force ID: 158878. Published: 2019-06-17T15:10:22.837Z Updated: 2024-09-17T00:37:17.811Z Open on db.gcve.eu Reference links http://www.ibm.com/support/docview.wss?uid=ibm10886913 https://exchange.xforce.ibmcloud.com/vulnerabilities/158878	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-4136`	vulnerable	2026-06-08 05:13:56.869230	Details available MEDIUM (5.4) IBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1, and 10.4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 158332. Published: 2019-06-17T15:10:22.797Z Updated: 2024-09-16T20:43:19.338Z Open on db.gcve.eu Reference links http://www.ibm.com/support/docview.wss?uid=ibm10886913 https://exchange.xforce.ibmcloud.com/vulnerabilities/158332	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.