PatchTheCVEcognos command center vulnerabilities and fixes
Recent CVEs affecting cognos command center, with upgrade or downgrade steps. 4 tracked.
Also searched as: cognoscommandcenter.
cognos command center has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-08-26. Highest priority: CVE-2025-2697 (score 33/100).
- CVE-2025-2697 HIGH 7.4 DOWNGRADE IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a remote attacker to conduct phishing attacks, usi
- CVE-2025-1994 HIGH 7.8 DOWNGRADE IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a local user to execute arbitrary code on the sy
- CVE-2025-1494 MEDIUM 6.1 DOWNGRADE IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a remote attacker to hijack the clicking action of t
- CVE-2024-31899 MEDIUM 4.3 DOWNGRADE IBM Cognos Command Center 10.2.4.1 and 10.2.5 could disclose highly sensitive user information to an authentic
FAQ
How do I fix cognos command center vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is cognos command center being exploited right now?
None of the tracked cognos command center CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which cognos command center CVE should I patch first?
CVE-2025-2697 currently ranks highest (33/100): IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a remote attacker to conduct phishing attacks, usi.