Cognos Command Center
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:cognos_command_center:10.2.5:*:*:*:*:*:*:*
part: a version: 10.2.5 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Cognos Command Center (cabb8130-5957-566d-97a8-9c82dad632dd) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-2697 |
vulnerable | 2026-06-08 07:16:58.085027 |
IBM Cognos Command Center HTTP Open Redirect
HIGH (7.4)
IBM Cognos Command Center 10.2.4.1 and 10.2.5
could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim.
Published: 2025-08-26T16:47:25.981Z
Updated: 2025-08-26T17:36:08.348Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-1994 |
vulnerable | 2026-06-08 07:08:38.711931 |
IBM Cognos Command Center code execution
HIGH (7.8)
IBM Cognos Command Center 10.2.4.1 and 10.2.5
could allow a local user to execute arbitrary code on the system due to the use of unsafe use of the BinaryFormatter function.
Published: 2025-08-26T16:49:03.832Z
Updated: 2025-08-26T17:35:50.942Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-1494 |
vulnerable | 2026-06-08 07:08:37.107676 |
IBM Cognos Command Center clickjacking
MEDIUM (6.1)
IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim.
Published: 2025-08-26T16:45:35.076Z
Updated: 2025-08-26T17:36:26.140Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-31899 |
vulnerable | 2026-06-08 06:35:32.360512 |
IBM Cognos Command Center information disclosure
MEDIUM (4.3)
IBM Cognos Command Center 10.2.4.1 and 10.2.5 could disclose highly sensitive user information to an authenticated user with physical access to the device.
Published: 2024-09-26T13:34:57.008Z
Updated: 2024-09-26T17:04:12.761Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-50324 |
vulnerable | 2026-06-08 06:16:15.946322 |
IBM Cognos Command Center information disclosure
MEDIUM (5.3)
IBM Cognos Command Center 10.2.4.1 and 10.2.5 exposes details the X-AspNet-Version Response Header that could allow an attacker to obtain information of the application environment to conduct further attacks. IBM X-Force ID: 275038.
Published: 2024-03-01T01:58:09.921Z
Updated: 2024-08-02T22:16:46.252Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.