Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:cognos_command_center:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductCognos Command Center (cabb8130-5957-566d-97a8-9c82dad632dd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-50324 vulnerable 2026-06-08 06:16:15.948163 IBM Cognos Command Center information disclosure
MEDIUM (5.3)
IBM Cognos Command Center 10.2.4.1 and 10.2.5 exposes details the X-AspNet-Version Response Header that could allow an attacker to obtain information of the application environment to conduct further attacks. IBM X-Force ID: 275038.
Published: 2024-03-01T01:58:09.921Z
Updated: 2024-08-02T22:16:46.252Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38707 vulnerable 2026-06-08 05:47:16.910339 IBM Cognos Command Center information disclosure
MEDIUM (4)
IBM Cognos Command Center 10.2.4.1 could allow a local attacker to obtain sensitive information due to insufficient session expiration. IBM X-Force ID: 234179.
Published: 2023-05-05T13:54:45.562Z
Updated: 2025-01-29T16:56:04.168Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4001 vulnerable 2026-06-08 05:04:33.470982 Details available
Session fixation vulnerability in IBM Cognos Command Center before 10.2 allows remote attackers to hijack web sessions via an authorization cookie.
Published: 2013-12-14T22:00:00.000Z
Updated: 2024-08-06T16:30:49.256Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4000 vulnerable 2026-06-08 05:04:33.469813 Details available
Multiple cross-site request forgery (CSRF) vulnerabilities in IBM Cognos Command Center before 10.2 allow remote attackers to hijack the authentication of administrators for requests that (1) start or (2) stop services.
Published: 2013-12-14T22:00:00.000Z
Updated: 2024-08-06T16:30:49.354Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.