GHSA-658q-f487-r8h7

GHSA-658q-f487-r8h7 PUBLISHED CVSS 8 HIGH

Record from GitHub Advisory Database · Published February 19, 2025

IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 could allow an authenticated attacker to conduct formula injection. An attacker could execute arbitrary commands on the system, caused by improper validation of file contents.

Risk scores

CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Timeline

Feb 19, 2025 CVE Published
May 1, 2026 Security Advisory

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln GHSA-658q-f487-r8h7
vulnetix vdb fixes GHSA-658q-f487-r8h7

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/GHSA-658q-f487-r8h7/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

https://nvd.nist.gov/vuln/detail/CVE-2024-45084 advisory
https://www.ibm.com/support/pages/node/7183597 url

Look up in the Resolve Platform →