CVE-2024-45084highCWE-1236

CVE-2024-45084: high-severity vulnerability in IBM Cognos Controller

IBM Cognos Controller CSV injection

Published · Updated

Follow this CVE+ Monitor Cognos Controller+ Monitor Controller

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8epss 0.4%
IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 could allow an authenticated attacker to conduct formula injection. An attacker could execute arbitrary commands on the system, caused by improper validation of file contents.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Affected products
IBM · Cognos ControllerIBM · Controller
Related CVEs — IBM Cognos Controller

In the same product, most dangerous first.

CVE-2019-4176MEDIUMCVE-2019-4176EPSS 1.9%CVE-2019-4173MEDIUMCVE-2019-4173EPSS 1.8%CVE-2020-4876HIGHCVE-2020-4876EPSS 1.7%CVE-2020-4875HIGHCVE-2020-4875EPSS 1.7%CVE-2020-4879HIGHCVE-2020-4879EPSS 1.5%CVE-2020-4685HIGHCVE-2020-4685EPSS 1.4%