IBM Cognos Controller 10.4.0
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:cognos_controller:10.4.0:*:*:*:*:*:*:*
part: a version: 10.4.0 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Cognos Controller (8e238403-9fc2-569f-aaa3-413fed55087f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-22364 |
vulnerable | 2026-06-08 05:40:53.650438 |
IBM Cognos Controller security bypass
MEDIUM (5.3)
IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 is vulnerable to external service interaction attack, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to induce the application to perform server-side DNS lookups or HTTP requests to arbitrary domain names. By submitting suitable payloads, an attacker can cause the application server to attack other systems that it can interact with. IBM X-Force ID: 220903.
Published: 2024-05-03T18:14:34.420Z
Updated: 2024-08-03T03:14:55.079Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4879 |
vulnerable | 2026-06-08 05:26:41.123810 |
Details available
HIGH (7.3)
IBM Cognos Controller 10.4.0, 10.4.1, and 10.4.2 could allow a remote attacker to bypass security restrictions, caused by improper validation of authentication cookies. IBM X-Force ID: 190847.
Published: 2022-01-21T17:20:21.768Z
Updated: 2024-09-16T17:23:10.228Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4877 |
vulnerable | 2026-06-08 05:26:41.123030 |
Details available
HIGH (7.3)
IBM Cognos Controller 10.4.0, 10.4.1, and 10.4.2 could be vulnerable to unauthorized modifications by using public fields in public classes. IBM X-Force ID: 190843.
Published: 2022-01-21T17:20:20.280Z
Updated: 2024-09-17T00:11:58.096Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4876 |
vulnerable | 2026-06-08 05:26:41.122492 |
Details available
HIGH (7.1)
IBM Cognos Controller 10.4.0, 10.4.1, and 10.4.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 190839.
Published: 2022-01-21T17:20:18.549Z
Updated: 2024-09-17T01:16:21.103Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4875 |
vulnerable | 2026-06-08 05:26:41.121560 |
Details available
HIGH (7.1)
IBM Cognos Controller 10.4.0, 10.4.1, and 10.4.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 190838.
Published: 2022-01-21T17:20:17.045Z
Updated: 2024-09-16T17:28:17.395Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4685 |
vulnerable | 2026-06-08 05:26:40.691928 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-4412 |
vulnerable | 2026-06-08 05:13:57.135440 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-4411 |
vulnerable | 2026-06-08 05:13:57.134818 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-4177 |
vulnerable | 2026-06-08 05:13:56.919201 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-4176 |
vulnerable | 2026-06-08 05:13:56.918587 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-4175 |
vulnerable | 2026-06-08 05:13:56.918127 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-4174 |
vulnerable | 2026-06-08 05:13:56.917668 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-4173 |
vulnerable | 2026-06-08 05:13:56.916821 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-4171 |
vulnerable | 2026-06-08 05:13:56.914604 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-4136 |
vulnerable | 2026-06-08 05:13:56.870835 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.