5 results (0.009 seconds)

CVSS: 4.3EPSS: 0%CPEs: 2EXPL: 0

CVE-2022-22363 – IBM Cognos Controller information disclosure

https://notcve.org/view.php?id=CVE-2022-22363

07 Jan 2025 — IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. • https://www.ibm.com/support/pages/node/7179163 • CWE-209: Generation of Error Message Containing Sensitive Information •

CVSS: 3.7EPSS: 0%CPEs: 2EXPL: 0

CVE-2021-20455 – IBM Cognos Controller information disclosure

https://notcve.org/view.php?id=CVE-2021-20455

07 Jan 2025 — IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. • https://www.ibm.com/support/pages/node/7179163 • CWE-209: Generation of Error Message Containing Sensitive Information •

CVSS: 8.5EPSS: 0%CPEs: 2EXPL: 0

CVE-2024-40702 – IBM Cognos Controller improper certificate validation

https://notcve.org/view.php?id=CVE-2024-40702

07 Jan 2025 — IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow an unauthorized user to obtain valid tokens to gain access to protected resources due to improper certificate validation. • https://www.ibm.com/support/pages/node/7179163 • CWE-295: Improper Certificate Validation •

CVSS: 6.8EPSS: 0%CPEs: 2EXPL: 0

CVE-2024-28778 – IBM Cognos Controller information disclosure

https://notcve.org/view.php?id=CVE-2024-28778

07 Jan 2025 — IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 is vulnerable to exposure of Artifactory API keys. This vulnerability allows users to publish code to private packages or repositories under the name of the organization. • https://www.ibm.com/support/pages/node/7179163 • CWE-798: Use of Hard-coded Credentials •

CVSS: 4.3EPSS: 0%CPEs: 2EXPL: 0

CVE-2024-25037 – IBM Cognos Controller information disclosure

https://notcve.org/view.php?id=CVE-2024-25037

07 Jan 2025 — IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow a remote attacker to obtain sensitive information when a stack trace is returned in the browser. • https://www.ibm.com/support/pages/node/7179163 • CWE-209: Generation of Error Message Containing Sensitive Information •