ibm control desk

Name: ibm control desk
Brand: ibm

productUS

cpe:2.3:a:ibm:control_desk:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical2high12medium1low

updated 2026-10-28

vulnerabilities (15)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2019-4364US	high8.0	2.57% (85th)	—	no fix	2019-06-19	2 versions
CVE-2019-4512US	medium4.3	0.99% (63rd)	—	no fix	2019-10-09	2 versions
CVE-2015-5016US	medium4.3	0.97% (62nd)	—	no fix	2018-03-27	2 versions
CVE-2019-4303US	medium5.4	0.97% (62nd)	—	no fix	2019-06-19	2 versions
CVE-2022-22330US	medium5.3	0.91% (60th)	—	no fix	2022-09-13	6 versions
CVE-2019-4644US	medium6.1	0.89% (59th)	—	no fix	2020-04-17	2 versions
CVE-2020-4409US	high8.2	0.89% (59th)	—	no fix	2020-09-16	2 versions
CVE-2019-4056US	medium4.3	0.85% (58th)	—	no fix	2019-06-06	2 versions
CVE-2019-4446US	medium5.4	0.78% (56th)	—	no fix	2020-04-17	2 versions
CVE-2018-2028US	medium6.5OT elevated	0.77% (55th)	—	no fix	2019-06-06	2 versions
CVE-2022-22329US	medium4.3OT elevated	0.68% (52nd)	—	no fix	2022-09-13	6 versions
CVE-2019-4749US	medium5.4	0.67% (52nd)	—	no fix	2020-04-17	2 versions
CVE-2019-4429US	medium5.4	0.56% (47th)	—	no fix	2020-02-19	2 versions
CVE-2021-20559US	medium5.4	0.50% (42nd)	—	no fix	2021-05-10	2 versions
CVE-2019-4048US	low2.1	0.31% (23rd)	—	no fix	2019-06-06	3 versions

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5 CVEs
CWE-1236Improper Neutralization of Formula Elements in a CSV File1 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-209Generation of Error Message Containing Sensitive Information1 CVEs
CWE-269Improper Privilege Management1 CVEs
CWE-311Missing Encryption of Sensitive Data1 CVEs
CWE-312Cleartext Storage of Sensitive Information1 CVEs
CWE-315Cleartext Storage of Sensitive Information in a Cookie1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.