CVE-2024-45676CWE-351

IBM Cognos Controller file upload

Medium · published December 3, 2024

CVSS v3.1
4.3
EPSS
0%
Percentile
5.0
In the wild
Unconfirmed
What it is

IBM Cognos Controller 11.0.0 and 11.0.1

could allow an authenticated user to upload insecure files, due to insufficient file type distinction.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00161 · 5.0th percentile
Weakness
CWE-351 · Insufficient Type Distinction
Published
2024-12-03T17:08Z
EPSS history
Timeline
  • 03 DEC 17:08Z
    IBM Cognos Controller file upload
    cvelistv5