CVE-2025-1494

MEDIUM

IBM Cognos Command Center 10.2.4.1-10.2.5 - CSRF

Title source: llm
STIX 2.1

Description

IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim.

References (1)

Scores

CVSS v3 6.1
EPSS 0.0003
EPSS Percentile 8.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-1021
Status published
Products (2)
ibm/cognos_command_center 10.2.4.1
ibm/cognos_command_center 10.2.5
Published Aug 26, 2025
Tracked Since Feb 18, 2026