Ibm Cognos Controller vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Ibm Cognos Controller: 3 record(s), with affected versions and fixes.
cpe:2.3:a:ibm:cognos_controller

CVE-2025-36102 Low · 2.7 CWE-602 Dec 8, 2025

IBM Controller Validation Bypass

IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 could allow a privileged user to bypass validation, passing user input into the application as trusted data, due to client-side enforcement of server-side security.

CVE-2025-36015 Medium · 6.5 CWE-1284 Dec 8, 2025

IBM Controller Denial of Service

IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 could allow an authenticated user to cause a denial of service due to improper validation of a specified quantity size input.

CVE-2025-33111 Medium · 4.3 CWE-379 Dec 8, 2025

IBM Controller Information Disclosure

IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 is vulnerable to creation of temporary files without atomic operations which may expose sensitive information to an authenticated user due to race condition attacks.