CVE-2024-28777CWE-502

IBM Cognos Controller code execution

High · published February 19, 2025

CVSS v3.1
8.8
EPSS
1%
Percentile
48.6
In the wild
Unconfirmed
What it is

IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0

is vulnerable to unrestricted deserialization. This vulnerability allows users to execute arbitrary code, escalate privileges, or cause denial of service attacks by exploiting the unrestricted deserialization of types in the application.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00609 · 48.6th percentile
Weakness
CWE-502 · Deserialization of Untrusted Data
Published
2025-02-19T16:04Z
EPSS history
Timeline
  • 19 FEB 16:04Z
    IBM Cognos Controller code execution
    cvelistv5