Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-41776 EUVD-2024-39343GHSA-8x98-cpj8-mjx8

IBM Cognos Controller cross-site request forgery

Published Dec 3, 2024 · Updated Dec 3, 2024 · Assigned by ibm

Description

IBM Cognos Controller 11.0.0 and 11.0.1

is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.

Affected products

VendorProductAffectedFixed
IBM Cognos Controller 11.0.0, 11.0.1 —

References