CVE-2024-45676

4.3 mediumEPSS 0.2%

Medium (4.3) in ibm cognos controller. EPSS 0.2% chance of exploitation in the next 30 days.

IBM Cognos Controller 11.0.0 and 11.0.1 could allow an authenticated user to upload insecure files, due to insufficient file type distinction.

Severity

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 5% of CVEs (scores of 2026-10-31)
CWE: CWE-351
Published: 2024-12-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19