Known vulnerabilities in IBM Cognos Command Center 10.2.5 IF2

Vendor: IBM Corporation
Software: IBM Cognos Command Center
Version: 10.2.5 IF2
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cognos_command_center:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 11
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting IBM Cognos Command Center version 10.2.5 IF2 IBM Cognos Command Center 10.2.5 IF2 is affected by 11 vulnerabilities: 1 high, 9 medium, 1 low Critical High Medium Low

Vulnerabilities (11)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU125787 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-34197		 CWE-94 Medium
Public exploit available
Exploited
 10.2.5 FP1 IF4 10.04.2026 SB2026041071
SB2026050348
SB2026050349
and 8 more
#VU125786 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-33227		 CWE-22 Low
No
No
 10.2.5 FP1 IF4 10.04.2026 SB2026041071
SB2026050348
SB2026050349
and 5 more
#VU123159 - Incorrect Calculation of Buffer Size
CVE-2026-1188		 CWE-131 High
No
No
 10.2.5 FP1 IF3 24.02.2026 SB2026022412
SB2026022413
SB2026022531
and 46 more
#VU121727 - Improper input validation
CVE-2026-21945		 CWE-20 Medium
No
No
 10.2.5 FP1 IF3 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 96 more
#VU121728 - Improper input validation
CVE-2026-21932		 CWE-20 Medium
No
No
 10.2.5 FP1 IF3 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 77 more
#VU121729 - Improper input validation
CVE-2026-21933		 CWE-20 Medium
No
No
 10.2.5 FP1 IF3 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 90 more
#VU121730 - Out-of-bounds read
CVE-2026-21925		 CWE-125 Medium
No
No
 10.2.5 FP1 IF3 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 92 more
#VU114346 - Command injection
CVE-2025-7962		 CWE-77 Medium
No
No
 10.2.5 FP1 IF2 21.08.2025 SB2025082145
SB2025082146
SB2025082147
and 54 more
#VU113607 - Uncontrolled Recursion
CVE-2025-48924		 CWE-674 Medium
No
No
 10.2.5 FP1 IF2 04.08.2025 SB2025080422
SB2025080423
SB2025080427
and 180 more
#VU108836 - Resource exhaustion
CVE-2025-1948		 CWE-400 Medium
No
No
 10.2.5 FP1 IF2 09.05.2025 SB2025050924
SB2025051562
SB2025063009
and 18 more
#VU108769 - Resource exhaustion
CVE-2025-27533		 CWE-400 Medium
Public exploit available
No
 10.2.5 FP1 IF2 07.05.2025 SB2025050773
SB2025051670
SB2025062647
and 13 more