CVE-2019-4174

LOW 3.3CVE-2019-4174 · Published 17/06/2019 · updated 17/06/2026

In short

CVE-2019-4174 is a LOW (CVSS 3.3) vulnerability affecting cognos controller (ibm).
Chance of exploitation in the next 30 days (EPSS): 0.34%, higher than 27.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
cognos controller ibm	`= 10.2.0= 10.2.1= 10.3.0= 10.3.1= 10.4.0`	No fix yet

Description

IBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1, and 10.4.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 158879.

References

ibm.com/support/docview.wss · Patch
exchange.xforce.ibmcloud.com/vulnerabilities/158879 · VDB Entry

More vulnerabilities in cognos controller

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

cognos controller

ibm

= 10.2.0= 10.2.1= 10.3.0= 10.3.1= 10.4.0

No fix yet

More vulnerabilities in cognos controller

See all →