Vulnerabilities (CVE)

Filtered by vendor Ibm Subscribe
Filtered by product Cognos Controller
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-4171 1 Ibm 1 Cognos Controller 2020-08-24 4.3 MEDIUM 3.7 LOW
IBM Cognos Controller 10.3.0, 10.3.1, 10.4.0, and 10.4.1 does not set the secure attribute on authorization tokens or session cookies. This could allow an attacker to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 158876.
CVE-2019-4174 1 Ibm 1 Cognos Controller 2020-08-24 2.1 LOW 3.3 LOW
IBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1, and 10.4.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 158879.
CVE-2019-4177 1 Ibm 1 Cognos Controller 2020-08-24 2.1 LOW 3.3 LOW
IBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1, and 10.4.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 158882.