4.0
Medium
CVE-2022-38707 IBM Cognos Command Center 10.2.4.1 could allow a local attacker to obtain sensitive information due to insufficient…
Description
IBM Cognos Command Center 10.2.4.1 could allow a local attacker to obtain sensitive information due to insufficient session expiration. IBM X-Force ID: 234179.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cognos Command Center | 10.2.4.1 | No fix stated |
Other CVEs of Cognos Command Center
The 6 CVEs of Cognos Command Center →
CVE-2025-1994
IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a local user to execute arbitrary code on the system due to…
7.8
High
CVE-2025-2697
IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a remote attacker to conduct phishing attacks, using an…
7.4
High
CVE-2025-1494
IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a remote attacker to hijack the clicking action of the victim
6.1
Medium
CVE-2024-31899
IBM Cognos Command Center 10.2.4.1 and 10.2.5 could disclose highly sensitive user information to an authenticated…
4.3
Medium