CVE-2010-0557
IBM Cognos Express - Credentials Management
Title source: ruleDescription
IBM Cognos Express 9.0 allows attackers to obtain unspecified access to the Tomcat Manager component, and cause a denial of service, by leveraging hardcoded credentials.
Exploits (3)
metasploit
WORKING POC
EXCELLENT
rubypocjava
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/tomcat_mgr_upload.rb
metasploit
WORKING POC
EXCELLENT
by jduck · rubypocjava
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/tomcat_mgr_deploy.rb
References (5)
Scores
EPSS
0.7940
EPSS Percentile
99.1%
Details
CWE
CWE-255
Status
published
Products (1)
ibm/cognos_express
9.0
Published
Feb 05, 2010
Tracked Since
Feb 18, 2026