Vulnerability Database

296,480

Total vulnerabilities in the database

CVE-2024-28777

IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0

is vulnerable to unrestricted deserialization. This vulnerability allows users to execute arbitrary code, escalate privileges, or cause denial of service attacks by exploiting the unrestricted deserialization of types in the application.

  • Published: Feb 19, 2025
  • Updated: May 4, 2025
  • CVE: CVE-2024-28777
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 8.8
  • AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWEs:

OWASP TOP 10:

Software From Fixed in
ibm / cognos_controller 11.0.0 11.0.1.4
ibm / controller 11.1.0 11.1.0.x