7.4
Élevée
CVE-2025-2697 IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a remote attacker to conduct phishing attacks, using an…
Description
IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cognos Command Center 10.2 | 10.2.4.1 → 10.2.5 | Pas de correctif indiqué |
Autres CVE de Cognos Command Center
Les 6 CVE de Cognos Command Center →
CVE-2025-1994
IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a local user to execute arbitrary code on the system due to…
7.8
Élevée
CVE-2025-1494
IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a remote attacker to hijack the clicking action of the victim
6.1
Moyenne
CVE-2024-31899
IBM Cognos Command Center 10.2.4.1 and 10.2.5 could disclose highly sensitive user information to an authenticated…
4.3
Moyenne
CVE-2023-50324
IBM Cognos Command Center 10.2.4.1 and 10.2.5 exposes details the X-AspNet-Version Response Header that could allow an…
5.3
Moyenne