CVE-2022-39163
Medium
Description
IBM Cognos Controller 11.0.0 through 11.1.0 is vulnerable to a Client-Side Desync (CSD) attack where an attacker could exploit a desynchronized browser connection that could lead to further cross-site scripting (XSS) attacks.
SeverityMedium
CVSS4.7
Exploit probability10. percentile0.2%
Product
Ibm Cognos Controller
PublishedMar 26, 2025
First seenMar 26, 2025
Weakness typeCWE-444CWE-444
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm cognos_controller | 11.0.0 ≤ v ≤ 11.0.1 | — |
| ibm controller | 11.1.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.