Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

TI-2025-01736 CVE-2025-1994 · GHSA-j666-4gr9-r4q4

IBM Cognos Command Center code execution

Priority LOW 35

IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a local user to execute arbitrary code on the system due to the use of unsafe use of the BinaryFormatter function.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00162 Published 2025-08-26 No fix listed CWE-242
Priority MEDIUM 40

IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a remote attacker to conduct phishing attacks, using an open redirect attack.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.0036 Published 2025-08-26 No fix listed CWE-601
TI-2025-01284 CVE-2025-1494 · GHSA-vq5f-53c7-2g7m

IBM Cognos Command Center clickjacking

Priority LOW 27

IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a remote attacker to hijack the clicking action of the victim.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00291 Published 2025-08-26 No fix listed CWE-1021