Known vulnerabilities in IBM Cognos Command Center 10.2.4

Vendor: IBM Corporation
Software: IBM Cognos Command Center
Version: 10.2.4
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cognos_command_center:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 16
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting IBM Cognos Command Center version 10.2.4 IBM Cognos Command Center 10.2.4 is affected by 16 vulnerabilities: 2 high, 5 medium, 9 low Critical High Medium Low

Vulnerabilities (16)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU125787 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-34197		 CWE-94 Medium
Public exploit available
Exploited
 10.2.5 FP1 IF4 10.04.2026 SB2026041071
SB2026050348
SB2026050349
and 8 more
#VU125786 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-33227		 CWE-22 Low
No
No
 10.2.5 FP1 IF4 10.04.2026 SB2026041071
SB2026050348
SB2026050349
and 5 more
#VU123159 - Incorrect Calculation of Buffer Size
CVE-2026-1188		 CWE-131 High
No
No
 10.2.5 FP1 IF3 24.02.2026 SB2026022412
SB2026022413
SB2026022531
and 46 more
#VU121727 - Improper input validation
CVE-2026-21945		 CWE-20 Medium
No
No
 10.2.5 FP1 IF3 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 97 more
#VU121728 - Improper input validation
CVE-2026-21932		 CWE-20 Medium
No
No
 10.2.5 FP1 IF3 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 78 more
#VU121729 - Improper input validation
CVE-2026-21933		 CWE-20 Medium
No
No
 10.2.5 FP1 IF3 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 91 more
#VU121730 - Out-of-bounds read
CVE-2026-21925		 CWE-125 Medium
No
No
 10.2.5 FP1 IF3 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 93 more
#VU12354 - Permissions, Privileges, and Access Controls
CVE-2018-1417		 CWE-264 Low
No
No
 - 02.05.2018 SB2018050208
SB2018051601
SB2018052909
#VU11948 - Permissions, Privileges, and Access Controls
CVE-2018-2794		 CWE-264 Low
No
No
 - 19.04.2018 SB2018041911
SB2018041919
SB2018041920
and 23 more
#VU11946 - Permissions, Privileges, and Access Controls
CVE-2018-2783		 CWE-264 Low
No
No
 - 19.04.2018 SB2018041911
SB2018042428
SB2018042430
and 17 more
#VU10135 - Permissions, Privileges, and Access Controls
CVE-2018-2633		 CWE-264 Low
No
No
 - 22.01.2018 SB2018011711
SB2018012313
SB2018020903
and 30 more
#VU10131 - Permissions, Privileges, and Access Controls
CVE-2018-2603		 CWE-264 Low
No
No
 - 22.01.2018 SB2018011711
SB2018012313
SB2018020903
and 31 more
#VU10130 - Permissions, Privileges, and Access Controls
CVE-2018-2602		 CWE-264 Low
No
No
 - 22.01.2018 SB2018011711
SB2018012313
SB2018020903
and 28 more
#VU10125 - Exposure of sensitive information to an unauthorized actor
CVE-2018-2579		 CWE-200 Low
No
No
 - 22.01.2018 SB2018011711
SB2018012313
SB2018020903
and 29 more
#VU8083 - Exposure of sensitive information to an unauthorized actor
CVE-2017-10115		 CWE-200 Low
No
No
 - 05.09.2017 SB2017071815
SB2017090107
SB2017092008
and 9 more
#VU8082 - Permissions, Privileges, and Access Controls
CVE-2017-10116		 CWE-264 High
No
No
 - 05.09.2017 SB2017071815
SB2017090107
SB2017092008
and 8 more