CVE-2013-4000

IBM Cognos Command Center < 10.2 - Cross-Site Request Forgery

Title source: llm

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in IBM Cognos Command Center before 10.2 allow remote attackers to hijack the authentication of administrators for requests that (1) start or (2) stop services.

References (2)

Core 2

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/85150

Vendor Advisory x_refsource_confirm

http://www-01.ibm.com/support/docview.wss?uid=swg21657932

Scores

EPSS 0.0057

EPSS Percentile 43.1%

Details

CWE

CWE-352

Status published

Products (2)

ibm/cognos_command_center 10.0

ibm/cognos_command_center < 10.1

Published Dec 14, 2013

Tracked Since Feb 18, 2026