Security Bulletin: IBM Cognos Controller is affected but not vulnerable to arbitrary code execution and SQL injection due to Apache Log4j v1 vulnerabilities (CVE-2022-23305, CVE-2022-23302, CVE-2021-4104)

🗓️ 03 Jun 2022 17:47:41Reported by IBMType

ibm🔗 www.ibm.com👁 37 Views

IBM Cognos Controller not vulnerable, upgraded Apache Log4j v2.17.1 for 10.4.2 and 10.4.1 stream

Reporter	Title	Published	Views	Family All 199
RedHat Linux	(RHSA-2022:0430) Important: Red Hat Data Grid 7.3.9 security update	3 Feb 202213:55	–	redhat
RedHat Linux	(RHSA-2022:0524) Low: Red Hat JBoss Web Server 3.1 Service Pack 14 Security Update	14 Feb 202216:57	–	redhat
RedHat Linux	(RHSA-2022:0475) Low: RHV Manager (ovirt-engine) security update [ovirt-4.4.10-1]	8 Feb 202216:46	–	redhat
RedHat Linux	(RHSA-2022:0437) Important: Red Hat JBoss Enterprise Application Platform 6.4 security update	3 Feb 202218:34	–	redhat
RedHat Linux	(RHSA-2022:0435) Important: Red Hat JBoss Enterprise Application Platform 7.4 security update	3 Feb 202218:14	–	redhat
RedHat Linux	(RHSA-2022:0661) Moderate: Red Hat Fuse 7.10.1 release and security update	23 Feb 202214:02	–	redhat
RedHat Linux	(RHSA-2022:0436) Important: Red Hat JBoss Enterprise Application Platform 7.4 security update	3 Feb 202218:14	–	redhat
RedHat Linux	(RHSA-2022:0290) Important: parfait:0.5 security update	26 Jan 202214:27	–	redhat
RedHat Linux	(RHSA-2022:0527) Low: Red Hat JBoss Web Server 3.1 Service Pack 14 security update	14 Feb 202217:25	–	redhat
RedHat Linux	(RHSA-2022:0446) Moderate: Red Hat Single Sign-On 7.4.10 security update	7 Feb 202213:34	–	redhat

Vulners

Node

ibm cognos_controllerMatch10.4.2

ibm cognos_controllerMatch10.4.1

ibm cognos_controllerMatch10.4.0

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo