Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

TI-2025-24835 CVE-2025-36421 · GHSA-4fr9-cr7w-7w6w

Multiple vulnerabilities in IBM Controller

Priority LOW 26

IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 transmits data in clear text that could allow an attacker to obtain sensitive information using man in the middle techniques.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00203 Published 2026-09-18 No fix listed CWE-319
TI-2025-24744 CVE-2025-36178 · GHSA-mcq3-jh58-5jpc

Multiple vulnerabilities in IBM Controller

Priority LOW 24

IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 could allow an authenticated user to bypass input validation due to improper validation of client-side input of file size.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00342 Published 2026-09-18 No fix listed CWE-1284
TI-2025-01155 CVE-2025-1350 · GHSA-55pp-c8pp-j634

Multiple vulnerabilities in IBM Controller

Priority LOW 30

IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00402 Published 2026-09-18 No fix listed CWE-209