6.1
Moyenne
CVE-2025-1494 IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a remote attacker to hijack the clicking action of the victim
Description
IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cognos Command Center 10.2 | 10.2.4.1 → 10.2.5 | Pas de correctif indiqué |
Autres CVE de Cognos Command Center
Les 6 CVE de Cognos Command Center →
CVE-2025-1994
IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a local user to execute arbitrary code on the system due to…
7.8
Élevée
CVE-2025-2697
IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a remote attacker to conduct phishing attacks, using an…
7.4
Élevée
CVE-2024-31899
IBM Cognos Command Center 10.2.4.1 and 10.2.5 could disclose highly sensitive user information to an authenticated…
4.3
Moyenne
CVE-2023-50324
IBM Cognos Command Center 10.2.4.1 and 10.2.5 exposes details the X-AspNet-Version Response Header that could allow an…
5.3
Moyenne