6.1
Medium
CVE-2025-1494 IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a remote attacker to hijack the clicking action of the victim
Description
IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cognos Command Center 10.2 | 10.2.4.1 → 10.2.5 | No fix stated |
Other CVEs of Cognos Command Center
The 6 CVEs of Cognos Command Center →
CVE-2025-1994
IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a local user to execute arbitrary code on the system due to…
7.8
High
CVE-2025-2697
IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a remote attacker to conduct phishing attacks, using an…
7.4
High
CVE-2024-31899
IBM Cognos Command Center 10.2.4.1 and 10.2.5 could disclose highly sensitive user information to an authenticated…
4.3
Medium
CVE-2023-50324
IBM Cognos Command Center 10.2.4.1 and 10.2.5 exposes details the X-AspNet-Version Response Header that could allow an…
5.3
Medium