Cognos Command Center (Ibm) - vulnerabilities (CVEs)
8 CVEs, 0 in the last 30 days, 8 known versions, newest CVE from 2025-08-26. Vendor: Ibm.
CVEs of Cognos Command Center
- CVE-2025-2697 - CVSS 9.3 (critical), 2025-08-26: IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim…
- CVE-2025-1994 - CVSS 7.8 (high), 2025-08-26: IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a local user to execute arbitrary code on the system due to the use of unsafe use of the…
- CVE-2025-1494 - CVSS 6.1 (medium), 2025-08-26: IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a…
- CVE-2024-31899 - CVSS 4.3 (medium), 2024-09-26: IBM Cognos Command Center 10.2.4.1 and 10.2.5 could disclose highly sensitive user information to an authenticated user with physical access to the device.
- CVE-2023-50324 - CVSS 5.3 (medium), 2024-03-01: IBM Cognos Command Center 10.2.4.1 and 10.2.5 exposes details the X-AspNet-Version Response Header that could allow an attacker to obtain information of the…
- CVE-2022-38707 - CVSS 5.5 (medium), 2023-05-05: IBM Cognos Command Center 10.2.4.1 could allow a local attacker to obtain sensitive information due to insufficient session expiration. IBM X-Force ID: 234179.
- CVE-2013-4001 - CVSS 4.3 (medium), 2013-12-14: Session fixation vulnerability in IBM Cognos Command Center before 10.2 allows remote attackers to hijack web sessions via an authorization cookie.
- CVE-2013-4000 - CVSS 6.8 (medium), 2013-12-14: Multiple cross-site request forgery (CSRF) vulnerabilities in IBM Cognos Command Center before 10.2 allow remote attackers to hijack the authentication of…
