IBM Cognos Controller
Moderate fix1 remedy
cpe:2.3:a:ibm:cognos_controller:*:*:*:*:*:*:*
Moderate fix1 remedy
- >= 11.0.0, <= 11.0.1 FP3
IBM Cognos Controller and IBM Controller Formula Injection Vulnerability Allowing Arbitrary Command Execution
Vulnerability
Patched
A formula injection vulnerability has been identified in IBM Cognos Controller versions 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0. This vulnerability could enable an authenticated attacker to execute arbitrary commands on the system, stemming from inadequate validation of file contents.
Impact
Exploitation of this vulnerability could lead to unauthorized command execution on the affected system.
Remediation
Users are advised to upgrade to IBM Cognos Controller 11.0.1 FP4 or IBM Controller 11.1.0.1. Instructions for downloading these versions are available on Fix Central.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
2.6impact
10.0exploitability
4.9remediation
7.7relevance
0.0threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.