IBM Controller
24 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-36421 | 11.0.0 – 11.0.1 FP7 ; 11.1.0 – 11.1.3 FP1 | Multiple vulnerabilities in IBM Controller | MEDIUM 5.9 | 0.2 % | ||
| CVE-2025-36178 | 11.0.0 – 11.0.1 FP7 ; 11.1.0 – 11.1.3 FP1 | Multiple vulnerabilities in IBM Controller | MEDIUM 5.4 | 0.3 % | ||
| CVE-2025-1350 | 11.0.0 – 11.0.1 FP7 ; 11.1.0 – 11.1.3 FP1 | Multiple vulnerabilities in IBM Controller | MEDIUM 5.3 | 0.4 % | ||
| CVE-2026-5065 | 11.0.1 – 26.0.0.5 ; 11.1.0 ; 11.1.1 ; … | IBM Controller is affected by vulnerabilities | HIGH 8.8 | 0.2 % | ||
| CVE-2025-36017 | 11.1.0 – 11.1.1 | IBM Controller Information Disclosure | MEDIUM 6.5 | 0.3 % | ||
| CVE-2025-36102 | 11.1.0 – 11.1.1 | IBM Controller Validation Bypass | LOW 2.7 | 0.2 % | ||
| CVE-2025-33111 | 11.1.0 – 11.1.1 | IBM Controller Information Disclosure | MEDIUM 4.3 | 0.2 % | ||
| CVE-2025-36015 | 11.1.0 – 11.1.1 | IBM Controller Denial of Service | MEDIUM 6.5 | 0.3 % | ||
| CVE-2025-36326 | 11.1.0 – 11.1.1 | IBM Controller information disclosure | HIGH 7.5 | 0.2 % | ||
| CVE-2025-33079 | 11.1.0 | IBM Controller information disclosure | MEDIUM 6.5 | 0.3 % | ||
| CVE-2022-39163 | 11.1.0 | IBM Cognos Controller HTTP response smuggling | MEDIUM 4.7 | 0.2 % | ||
| CVE-2024-41778 | 11.0.0 – 11.0.1 ; 11.1.0 | IBM Controller information disclosure | MEDIUM 6.5 | 0.3 % | ||
| CVE-2023-47160 | 11.1.0 | IBM Cognos Controller XML external entity injection | HIGH 8.2 | 0.5 % | ||
| CVE-2024-28777 | 11.1.0 | IBM Cognos Controller code execution | HIGH 8.8 | 0.6 % | ||
| CVE-2024-28776 | 11.1.0 | IBM Cognos Controller cross-site scripting | MEDIUM 5.4 | 0.2 % | ||
| CVE-2024-28780 | 11.1.0 | IBM Cognos Controller information disclosure | MEDIUM 5.9 | 0.2 % | ||
| CVE-2024-45081 | 11.1.0 | IBM Cognos Controller incorrect authorization | MEDIUM 6.5 | 0.3 % | ||
| CVE-2024-45084 | 11.1.0 | IBM Cognos Controller CSV injection | HIGH 8.0 | 0.4 % | ||
| CVE-2024-52902 | 11.1.0 | IBM Cognos Controller information disclosure | HIGH 8.8 | 0.4 % | ||
| CVE-2022-22363 | 11.1.0 | IBM Cognos Controller information disclosure | MEDIUM 4.3 | 0.8 % | ||
| CVE-2021-20455 | 11.1.0 | IBM Cognos Controller information disclosure | LOW 3.7 | 0.5 % | ||
| CVE-2024-40702 | 11.1.0 | IBM Cognos Controller improper certificate validation | HIGH 8.2 | 0.3 % | ||
| CVE-2024-28778 | 11.1.0 | IBM Cognos Controller information disclosure | MEDIUM 6.5 | 0.5 % | ||
| CVE-2024-25037 | 11.1.0 | IBM Cognos Controller information disclosure | MEDIUM 4.3 | 0.6 % |