CVE-2023-50324

The vulnerability CVE-2023-50324 affects IBM Cognos Command Center 10.2.4.1 and 10.2.5, where the X-AspNet-Version HTTP response header exposes environment details that could aid further attacks. This is a information-disclosure issue, not remote code execution. Root cause is exposure of server h...

CVE-2024-31899

IBM Cognos Command Center versions 10.2.4.1 and 10.2.5 are affected by a vulnerability that could disclose highly sensitive user information to an authenticated user with physical access to the device. The IBM Security Bulletin indicates that CVE-2024-31899 is addressed in IBM Cognos Command Cent...

CVE-2022-38707

CVE-2022-38707 affects IBM Cognos Command Center 10.2.4.1. The issue is an information-disclosure vulnerability caused by insufficient session expiration, enabling a local attacker to obtain sensitive information. The IBM Security bulletin and related sources confirm the weakness and note the imp...

CVE-2013-4001

CVE-2013-4001 affects IBM Cognos Command Center (before 10.2) with a session/fixation vulnerability that lets an attacker hijack web sessions via an authorization cookie. The issue is confirmed across multiple sources (NVD/NVD-related entries and IBM security bulletin); IBM states that Cognos Com...

CVE-2025-1494

IBM Cognos Command Center versions 10.2.4.1 and 10.2.5 are affected by a clickjacking vulnerability (CWE-1021) that could allow a remote attacker to hijack a victim’s click actions by luring them to a malicious website. The CVE-2025-1494 vulnerability has CVSS v3.1: AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:...

CVE-2013-4000

The CVE-2013-4000 entry concerns IBM Cognos Command Center with multiple CSRF vulnerabilities that allow remote attackers to hijack the administrator session for requests that start or stop services. Affected product: IBM Cognos Command Center prior to version 10.2. The core issue is CSRF in the ...

CVE-2025-2697

IBM Cognos Command Center versions 10.2.4.1 and 10.2.5 are affected by an open redirect vulnerability that can be exploited to spoof URLs and direct users to a malicious site, enabling phishing and potential data exposure. Remediation provided by IBM and vendor advisories is to upgrade to a fixed...

CVE-2025-1994

CVE-2025-1994 affects IBM Cognos Command Center versions 10.2.4.1 and 10.2.5. The root cause is unsafe use of the BinaryFormatter function, enabling a local user to execute arbitrary code on the system. Confirmed details from multiple sources indicate local code execution risk with high impact ac...