Known vulnerabilities in IBM Cognos Command Center

Vendor: IBM Corporation
Software: IBM Cognos Command Center
Software CPE: cpe:2.3:a:ibm_corporation:ibm_cognos_command_center:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 104
Public exploits: 13
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Cognos Command Center IBM Cognos Command Center is affected by 104 known vulnerabilities: 2 critical, 9 high, 49 medium, 44 low Critical High Medium Low

Vulnerabilities (104)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU125787 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-34197		 CWE-94 Medium
Available
Exploited
 10.2.5 FP1 IF4 10.04.2026 SB2026041071
SB2026050348
SB2026050349
and 8 more
#VU125786 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-33227		 CWE-22 Low
No
No
 10.2.5 FP1 IF4 10.04.2026 SB2026041071
SB2026050348
SB2026050349
and 5 more
#VU123159 - Incorrect Calculation of Buffer Size
CVE-2026-1188		 CWE-131 High
No
No
 10.2.5 FP1 IF3 24.02.2026 SB2026022412
SB2026022413
SB2026022531
and 46 more
#VU121727 - Improper input validation
CVE-2026-21945		 CWE-20 Medium
No
No
 10.2.5 FP1 IF3 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 96 more
#VU121728 - Improper input validation
CVE-2026-21932		 CWE-20 Medium
No
No
 10.2.5 FP1 IF3 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 77 more
#VU121729 - Improper input validation
CVE-2026-21933		 CWE-20 Medium
No
No
 10.2.5 FP1 IF3 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 90 more
#VU121730 - Out-of-bounds read
CVE-2026-21925		 CWE-125 Medium
No
No
 10.2.5 FP1 IF3 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 92 more
#VU114346 - Command injection
CVE-2025-7962		 CWE-77 Medium
No
No
 10.2.5 FP1 IF2 21.08.2025 SB2025082145
SB2025082146
SB2025082147
and 54 more
#VU113607 - Uncontrolled Recursion
CVE-2025-48924		 CWE-674 Medium
No
No
 10.2.5 FP1 IF2 04.08.2025 SB2025080422
SB2025080423
SB2025080427
and 180 more
#VU108836 - Resource exhaustion
CVE-2025-1948		 CWE-400 Medium
No
No
 10.2.5 FP1 IF2 09.05.2025 SB2025050924
SB2025051562
SB2025063009
and 18 more
#VU108769 - Resource exhaustion
CVE-2025-27533		 CWE-400 Medium
Available
No
 10.2.5 FP1 IF2 07.05.2025 SB2025050773
SB2025051670
SB2025062647
and 13 more
#VU98556 - Exposure of sensitive information to an unauthorized actor
CVE-2024-31899		 CWE-200 Low
No
No
 10.2.5 IF3 15.10.2024 SB2024101538
#VU94556 - Improper input validation
CVE-2024-21145		 CWE-20 Medium
No
No
 10.2.5 IF3 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 130 more
#VU94558 - Improper input validation
CVE-2024-21144		 CWE-20 Low
No
No
 10.2.5 IF3 18.07.2024 SB20240718154
SB20240718155
SB20240718192
and 114 more
#VU94559 - Improper input validation
CVE-2024-21131		 CWE-20 Low
No
No
 10.2.5 IF3 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 135 more
#VU91984 - Permissions, Privileges, and Access Controls
CVE-2024-3933		 CWE-264 Low
No
No
 10.2.5 IF3 12.06.2024 SB2024061213
SB20240613101
SB20240613102
and 29 more
#VU88665 - Improper input validation
CVE-2024-21085		 CWE-20 Low
No
No
 10.2.5 IF3 17.04.2024 SB2024041764
SB2024041765
SB2024041796
and 125 more
#VU88669 - Improper input validation
CVE-2024-21012		 CWE-20 Low
No
No
 10.2.5 IF3 17.04.2024 SB2024041764
SB2024041765
SB2024041766
and 68 more
#VU85467 - Improper input validation
CVE-2024-20932		 CWE-20 Medium
No
No
 10.2.5 IF2 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 47 more
#VU85469 - Improper input validation
CVE-2024-20952		 CWE-20 Medium
No
No
 10.2.5 IF2 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 189 more


Showing elements 1 - 20 out of 104