Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Cognos Controller — Vulnerabilities & Security Advisories 43

All 43 CVE vulnerabilities found in Cognos Controller, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security vulnerabilities associated with IBM Cognos Controller, categorized under enterprise resource planning software weaknesses. It collects data on critical and moderate flaws, including those affecting authentication mechanisms, input validation, and system configuration, covering the time range from 2004 to the present. Readers can use this resource to track vendor advisories issued by IBM regarding security updates and patches for this specific product line. Furthermore, users can gain a deeper understanding of common weakness classes prevalent in financial reporting applications by examining how these flaws manifest in Cognos Controller. The page also allows for a comprehensive look-up of the product’s vulnerability history, enabling security analysts and IT administrators to assess long-term risk exposure and prioritize remediation efforts based on historical trends. By centralizing this information, the page supports informed decision-making for maintaining the security posture of environments relying on Cognos Controller. It serves as a reference for identifying patterns in software defects and understanding the evolution of security issues within this particular vendor’s product ecosystem. This structured overview facilitates efficient security management by providing clear insights into past incidents and the corresponding mitigation strategies recommended by the vendor.

Vendor: IBM

CVE IDTitleCVSSSeverityPublished
CVE-2025-36326 IBM Controller information disclosure CWE-321 3.7 Low2025-09-26
CVE-2022-39163 IBM Cognos Controller HTTP response smuggling CWE-444 4.7 Medium2025-03-26
CVE-2023-47160 IBM Cognos Controller XML external entity injection CWE-611 8.2 High2025-02-19
CVE-2024-28777 IBM Cognos Controller code execution CWE-502 8.8 High2025-02-19
CVE-2024-28776 IBM Cognos Controller cross-site scripting CWE-79 5.4 Medium2025-02-19
CVE-2024-28780 IBM Cognos Controller information disclosure CWE-327 5.9 Medium2025-02-19
CVE-2024-45081 IBM Cognos Controller incorrect authorization CWE-863 6.5 Medium2025-02-19
CVE-2024-45084 IBM Cognos Controller CSV injection CWE-1236 8.0 High2025-02-19
CVE-2024-52902 IBM Cognos Controller information disclosure CWE-798 8.8 High2025-02-19
CVE-2024-41775 IBM Cognos Controller information disclosure CWE-327 5.9 Medium2024-12-03
CVE-2024-25020 IBM Cognos Controller file upload CWE-434 5.5 Medium2024-12-03
CVE-2024-41776 IBM Cognos Controller cross-site request forgery CWE-352 6.5 Medium2024-12-03
CVE-2024-41777 IBM Cognos Controller hard coded credentials CWE-798 7.5 High2024-12-03
CVE-2024-45676 IBM Cognos Controller file upload CWE-351 4.3 Medium2024-12-03
CVE-2024-25036 IBM Cognos Controller authentication bypass CWE-288 4.3 Medium2024-12-03
CVE-2024-25035 IBM Cognos Controller information disclosure CWE-497 5.3 Medium2024-12-03
CVE-2024-40691 IBM Cognos Controller file upload CWE-434 8.0 High2024-12-03
CVE-2024-25019 IBM Cognos Controller file upload CWE-434 5.5 Medium2024-12-03
CVE-2021-29892 IBM Cognos Controller information disclosure CWE-319 5.9 Medium2024-12-03
CVE-2023-40695 IBM Cognos Controller session fixation CWE-613 6.3 Medium2024-05-03
CVE-2021-20451 IBM Cognos Controller SQL injection CWE-89 6.0 Medium2024-05-03
CVE-2022-22364 IBM Cognos Controller security bypass CWE-350 5.3 Medium2024-05-03
CVE-2023-28952 IBM Cognos Controller log injection CWE-117 5.3 Medium2024-05-03
CVE-2023-38724 IBM Cognos Controller SQL injection CWE-89 6.3 Medium2024-05-03
CVE-2023-40696 IBM Cognos Controller information disclosure CWE-327 5.9 Medium2024-05-03
CVE-2021-20556 IBM Cognos Controller information disclosure CWE-204 5.3 Medium2024-05-03
CVE-2023-23474 IBM Cognos Controller information disclosure CWE-209 3.7 Low2024-05-03
CVE-2021-20450 IBM Cognos Controller information disclosure 4.3 Medium2024-05-03
CVE-2020-4874 IBM Cognos Controller information disclosure CWE-327 5.9 Medium2024-05-03
CVE-2020-4879 IBM Cognos Controller 授权问题漏洞 6.5 -2022-01-21

All 43 known CVE vulnerabilities affecting Cognos Controller with full Chinese analysis, references, and POCs where available.