cbcvebase.

Ibm Controller vulnerabilities

24 known vulnerabilities affecting ibm/controller.

Total CVEs
24
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH7MEDIUM15LOW2

Vulnerabilities

Page 2 of 2
CVE-2024-25037P4MEDIUMCVSS 4.3v11.1.02025-01-07
CVE-2024-25037 [MEDIUM] CWE-209 CVE-2024-25037: IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow a remote attacker IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow a remote attacker to obtain sensitive information when a stack trace is returned in the browser.
nvd
CVE-2022-22363P4MEDIUMCVSS 4.3v11.1.02025-01-07
CVE-2022-22363 [MEDIUM] CWE-209 CVE-2022-22363: IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow a remote attacker IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.
nvd
CVE-2021-20455P4LOWCVSS 3.7v11.1.02025-01-07
CVE-2021-20455 [LOW] CWE-209 CVE-2021-20455: IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow a remote attacker IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.
nvd
CVE-2025-36102P4LOWCVSS 2.7≥ 11.1.0, < 11.1.2≥ 11.1.0, ≤ 11.1.12025-12-08
CVE-2025-36102 [LOW] CWE-602 CVE-2025-36102: IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 could allow IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 could allow a privileged user to bypass validation, passing user input into the application as trusted data, due to client-side enforcement of server-side security.
nvd
Ibm Controller vulnerabilities | cvebase