# Ibm Cognos Controller


- [CVE-2024-28777](https://insights.sbomify.com/CVE-2024-28777/): IBM Cognos Controller code execution (high 8.8)
- [CVE-2024-52902](https://insights.sbomify.com/CVE-2024-52902/): IBM Cognos Controller information disclosure (high 8.8)
- [CVE-2023-47160](https://insights.sbomify.com/CVE-2023-47160/): IBM Cognos Controller XML external entity injection (high 8.2)
- [CVE-2024-40702](https://insights.sbomify.com/CVE-2024-40702/): IBM Cognos Controller improper certificate validation (high 8.2)
- [CVE-2024-45084](https://insights.sbomify.com/CVE-2024-45084/): IBM Cognos Controller CSV injection (high 8.0)
- [CVE-2024-40691](https://insights.sbomify.com/CVE-2024-40691/): IBM Cognos Controller file upload (high 8.0)
- [CVE-2020-4685](https://insights.sbomify.com/CVE-2020-4685/): Privilege escalation in Cognos Controller (high 8.0)
- [CVE-2024-41777](https://insights.sbomify.com/CVE-2024-41777/): IBM Cognos Controller hard coded credentials (high 7.5)
- [CVE-2020-4877](https://insights.sbomify.com/CVE-2020-4877/): Missing authorization in Cognos Controller (high 7.3)
- [CVE-2020-4879](https://insights.sbomify.com/CVE-2020-4879/): Auth bypass in Cognos Controller (high 7.3)
- [CVE-2020-4875](https://insights.sbomify.com/CVE-2020-4875/): XML external entity in Cognos Controller (high 7.1)
- [CVE-2020-4876](https://insights.sbomify.com/CVE-2020-4876/): XML external entity in Cognos Controller (high 7.1)

---
From sbomify Insights: https://insights.sbomify.com/products/ibm/cognos-controller/