Advisories · Technology

IBM Cognos Controller.

Every CVE that names IBM Cognos Controller among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-36102 CVE record

CVSS 2.7 Low

IBM Controller Validation Bypass
- IBM Controller
- IBM Cognos Controller
- CWE-602
Not analysed yet 8 Dec 2025
CVE-2025-33111 CVE record

CVSS 4.3 Medium

IBM Controller Information Disclosure
- IBM Controller
- IBM Cognos Controller
- CWE-379
Not analysed yet 8 Dec 2025
CVE-2025-36015 CVE record

CVSS 6.5 Medium

IBM Controller Denial of Service
- IBM Controller
- IBM Cognos Controller
- CWE-1284
Not analysed yet 8 Dec 2025
CVE-2025-36326 CVE record

CVSS 3.7 Low

IBM Controller information disclosure
- IBM Cognos Controller
- IBM Controller
- Hard-coded credentials
Not analysed yet 26 Sept 2025
CVE-2025-33079 CVE record

CVSS 6.5 Medium

IBM Controller information disclosure
- IBM Controller
- IBM Cognos Controller
- CWE-256
Not analysed yet 27 May 2025
CVE-2022-39163 CVE record

CVSS 4.7 Medium

IBM Cognos Controller HTTP response smuggling
- IBM Cognos Controller
- IBM Controller
- HTTP request smuggling
Not analysed yet 26 Mar 2025
CVE-2023-47160 CVE record

CVSS 8.2 High

IBM Cognos Controller XML external entity injection
- IBM Cognos Controller
- IBM Controller
- XML external entities (XXE)
Not analysed yet 19 Feb 2025
CVE-2024-28777 CVE record

CVSS 8.8 High

IBM Cognos Controller code execution
- IBM Cognos Controller
- IBM Controller
- Insecure deserialization
Not analysed yet 19 Feb 2025
CVE-2024-28776 CVE record

CVSS 5.4 Medium

IBM Cognos Controller cross-site scripting
- IBM Cognos Controller
- IBM Controller
- Cross-site scripting (XSS)
Not analysed yet 19 Feb 2025
CVE-2024-28780 CVE record

CVSS 5.9 Medium

IBM Cognos Controller information disclosure
- IBM Cognos Controller
- IBM Controller
- Weak cryptography or TLS
Not analysed yet 19 Feb 2025
CVE-2024-45081 CVE record

CVSS 6.5 Medium

IBM Cognos Controller incorrect authorization
- IBM Cognos Controller
- IBM Controller
- Broken access control
Not analysed yet 19 Feb 2025
CVE-2024-45084 CVE record

CVSS 8.0 High

IBM Cognos Controller CSV injection
- IBM Cognos Controller
- IBM Controller
- Other injection
Not analysed yet 19 Feb 2025
CVE-2024-52902 CVE record

CVSS 8.8 High

IBM Cognos Controller information disclosure
- IBM Cognos Controller
- IBM Controller
- Hard-coded credentials
Not analysed yet 19 Feb 2025
CVE-2022-22363 CVE record

CVSS 4.3 Medium

IBM Cognos Controller information disclosure
- IBM Controller
- IBM Cognos Controller
- Information disclosure
Not analysed yet 7 Jan 2025
CVE-2021-20455 CVE record

CVSS 3.7 Low

IBM Cognos Controller information disclosure
- IBM Controller
- IBM Cognos Controller
- Information disclosure
Not analysed yet 7 Jan 2025
CVE-2024-40702 CVE record

CVSS 8.2 High

IBM Cognos Controller improper certificate validation
- IBM Controller
- IBM Cognos Controller
- Weak cryptography or TLS
Not analysed yet 7 Jan 2025
CVE-2024-28778 CVE record

CVSS 6.5 Medium

IBM Cognos Controller information disclosure
- IBM Controller
- IBM Cognos Controller
- Hard-coded credentials
Not analysed yet 7 Jan 2025
CVE-2024-25037 CVE record

CVSS 4.3 Medium

IBM Cognos Controller information disclosure
- IBM Controller
- IBM Cognos Controller
- Information disclosure
Not analysed yet 7 Jan 2025
CVE-2024-41775 CVE record

CVSS 5.9 Medium

IBM Cognos Controller information disclosure
- IBM Cognos Controller
- Weak cryptography or TLS
Not analysed yet 3 Dec 2024
CVE-2024-25020 CVE record

CVSS 5.5 Medium

IBM Cognos Controller file upload
- IBM Cognos Controller
- Unrestricted file upload
Not analysed yet 3 Dec 2024
CVE-2024-41776 CVE record

CVSS 6.5 Medium

IBM Cognos Controller cross-site request forgery
- IBM Cognos Controller
- Cross-site request forgery (CSRF)
Not analysed yet 3 Dec 2024
CVE-2024-41777 CVE record

CVSS 7.5 High

IBM Cognos Controller hard coded credentials
- IBM Cognos Controller
- Hard-coded credentials
Not analysed yet 3 Dec 2024
CVE-2024-45676 CVE record

CVSS 4.3 Medium

IBM Cognos Controller file upload
- IBM Cognos Controller
- CWE-351
Not analysed yet 3 Dec 2024
CVE-2024-25036 CVE record

CVSS 4.3 Medium

IBM Cognos Controller authentication bypass
- IBM Cognos Controller
- Authentication bypass
Not analysed yet 3 Dec 2024
CVE-2024-25035 CVE record

CVSS 5.3 Medium

IBM Cognos Controller information disclosure
- IBM Cognos Controller
- Information disclosure
Not analysed yet 3 Dec 2024
CVE-2024-40691 CVE record

CVSS 8.0 High

IBM Cognos Controller file upload
- IBM Cognos Controller
- Unrestricted file upload
Not analysed yet 3 Dec 2024
CVE-2024-25019 CVE record

CVSS 5.5 Medium

IBM Cognos Controller file upload
- IBM Cognos Controller
- Unrestricted file upload
Not analysed yet 3 Dec 2024
CVE-2021-29892 CVE record

CVSS 5.9 Medium

IBM Cognos Controller information disclosure
- IBM Cognos Controller
- Weak cryptography or TLS
Not analysed yet 3 Dec 2024
CVE-2023-40695 CVE record

CVSS 6.3 Medium

IBM Cognos Controller session fixation
- IBM Cognos Controller
- Authentication bypass
Not analysed yet 3 May 2024
CVE-2021-20451 CVE record

CVSS 6.0 Medium

IBM Cognos Controller SQL injection
- IBM Cognos Controller
- SQL injection
Not analysed yet 3 May 2024
CVE-2022-22364 CVE record

CVSS 5.3 Medium

IBM Cognos Controller security bypass
- IBM Cognos Controller
- CWE-350
Not analysed yet 3 May 2024
CVE-2023-28952 CVE record

CVSS 5.3 Medium

IBM Cognos Controller log injection
- IBM Cognos Controller
- Other injection
Not analysed yet 3 May 2024
CVE-2023-38724 CVE record

CVSS 6.3 Medium

IBM Cognos Controller SQL injection
- IBM Cognos Controller
- SQL injection
Not analysed yet 3 May 2024
CVE-2023-40696 CVE record

CVSS 5.9 Medium

IBM Cognos Controller information disclosure
- IBM Cognos Controller
- Weak cryptography or TLS
Not analysed yet 3 May 2024
CVE-2021-20556 CVE record

CVSS 5.3 Medium

IBM Cognos Controller information disclosure
- IBM Cognos Controller
- CWE-204
Not analysed yet 3 May 2024
CVE-2023-23474 CVE record

CVSS 3.7 Low

IBM Cognos Controller information disclosure
- IBM Cognos Controller
- Information disclosure
Not analysed yet 3 May 2024
CVE-2021-20450 CVE record

CVSS 4.3 Medium

IBM Cognos Controller information disclosure
- IBM Cognos Controller
- CWE-565
Not analysed yet 3 May 2024
CVE-2020-4874 CVE record

CVSS 5.9 Medium

IBM Cognos Controller information disclosure
- IBM Cognos Controller
- Weak cryptography or TLS
Not analysed yet 3 May 2024
CVE-2020-4879 CVE record

CVSS 7.3 High

IBM Cognos Controller: IBM Cognos Controller 10.4.0, 10.4.1…
- IBM Cognos Controller
Not analysed yet 21 Jan 2022
CVE-2020-4877 CVE record

CVSS 7.3 High

IBM Cognos Controller: IBM Cognos Controller 10.4.0, 10.4.1…
- IBM Cognos Controller
Not analysed yet 21 Jan 2022
CVE-2020-4876 CVE record

CVSS 7.1 High

IBM Cognos Controller: IBM Cognos Controller 10.4.0, 10.4.1…
- IBM Cognos Controller
Not analysed yet 21 Jan 2022
CVE-2020-4875 CVE record

CVSS 7.1 High

IBM Cognos Controller: IBM Cognos Controller 10.4.0, 10.4.1…
- IBM Cognos Controller
Not analysed yet 21 Jan 2022
CVE-2020-4685 CVE record

CVSS 8.0 High

IBM Cognos Controller: A low level user of IBM Cognos Controller 10.3.0, 10.3.1, 10.4.0, 10.4.1…
- IBM Cognos Controller
Not analysed yet 11 Nov 2020
CVE-2019-4412 CVE record

CVSS 3.7 Low

IBM Cognos Controller stores sensitive information in URL parameters.
- IBM Cognos Controller
Not analysed yet 9 Nov 2019
CVE-2019-4411 CVE record

CVSS 4.3 Medium

IBM Cognos Controller: IBM Cognos Controller 10.3.0, 10.3.1, 10.4.0…
- IBM Cognos Controller
Not analysed yet 9 Nov 2019
CVE-2019-4175 CVE record

CVSS 5.9 Medium

IBM Cognos Controller: IBM Cognos Controller 10.3.0, 10.3.1, 10.4.0…
- IBM Cognos Controller
Not analysed yet 17 Sept 2019
CVE-2019-4171 CVE record

CVSS 3.7 Low

IBM Cognos Controller: IBM Cognos Controller 10.3.0, 10.3.1, 10.4.0…
- IBM Cognos Controller
Not analysed yet 17 Sept 2019
CVE-2019-4177 CVE record

CVSS 4.0 Medium

IBM Cognos Controller: IBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1…
- IBM Cognos Controller
Not analysed yet 17 Jun 2019
CVE-2019-4176 CVE record

CVSS 5.3 Medium

IBM Cognos Controller: IBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1…
- IBM Cognos Controller
Not analysed yet 17 Jun 2019
CVE-2019-4174 CVE record

CVSS 4.0 Medium

IBM Cognos Controller: IBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1…
- IBM Cognos Controller
Not analysed yet 17 Jun 2019
CVE-2019-4173 CVE record

CVSS 6.5 Medium

IBM Cognos Controller: IBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1…
- IBM Cognos Controller
Not analysed yet 17 Jun 2019
CVE-2019-4136 CVE record

CVSS 5.4 Medium

IBM Cognos Controller: IBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1…
- IBM Cognos Controller
Not analysed yet 17 Jun 2019