Skip to content

Product

ibm controller vulnerabilities

4 published CVES affecting ibm controller, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
4
Critical
0
High
2
Medium
2
Low
0
Unscored
0
CISA KEV
0

Latest ibm controller CVEs

Newest publication first

  1. CVE-2026-5065 IBM Controller is affected by vulnerabilities

    Published
    HighCVSS 8.8

    IBM Controller 11.0.1, 11.1.0, 11.1.1, and 11.1.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.

  2. CVE-2022-39163 IBM Cognos Controller HTTP response smuggling

    Published
    MediumCVSS 4.7

    IBM Cognos Controller 11.0.0 through 11.1.0 is vulnerable to a Client-Side Desync (CSD) attack where an attacker could exploit a desynchronized browser connection that could lead to further cross-site scripting (XSS) attacks.

  3. CVE-2023-47160 IBM Cognos Controller XML external entity injection

    Published
    HighCVSS 8.2

    IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.

  4. CVE-2022-22363 IBM Cognos Controller information disclosure

    Published
    MediumCVSS 4.3

    IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.