Known vulnerabilities in IBM Cognos Command Center 10.2.4 Fix Pack 1 IF19

Vendor: IBM Corporation

Software: IBM Cognos Command Center

Version: 10.2.4 Fix Pack 1 IF19

Software CPE: cpe:2.3:a:ibm_corporation:ibm_cognos_command_center:*:*:*:*:*:*:*:*

Website: https://www.ibm.com/us-en

Total vulnerabilities: 7

Public exploits: 1

Known exploited (KEV): 1

Highest CVSSv4 Score: 9.3

Vulnerabilities (7)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU125787 - Improper Control of Generation of Code ('Code Injection') CVE-2026-34197	CWE-94	Medium	Public exploit available	Exploited	10.2.5 FP1 IF4	10.04.2026	SB2026041071 SB2026050348 SB2026050349 and 8 more
#VU125786 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-33227	CWE-22	Low	No	No	10.2.5 FP1 IF4	10.04.2026	SB2026041071 SB2026050348 SB2026050349 and 5 more
#VU123159 - Incorrect Calculation of Buffer Size CVE-2026-1188	CWE-131	High	No	No	10.2.5 FP1 IF3	24.02.2026	SB2026022412 SB2026022413 SB2026022531 and 46 more
#VU121727 - Improper input validation CVE-2026-21945	CWE-20	Medium	No	No	10.2.5 FP1 IF3	20.01.2026	SB20260120152 SB20260120153 SB20260120154 and 96 more
#VU121728 - Improper input validation CVE-2026-21932	CWE-20	Medium	No	No	10.2.5 FP1 IF3	20.01.2026	SB20260120152 SB20260120153 SB20260120154 and 77 more
#VU121729 - Improper input validation CVE-2026-21933	CWE-20	Medium	No	No	10.2.5 FP1 IF3	20.01.2026	SB20260120152 SB20260120153 SB20260120154 and 90 more
#VU121730 - Out-of-bounds read CVE-2026-21925	CWE-125	Medium	No	No	10.2.5 FP1 IF3	20.01.2026	SB20260120152 SB20260120153 SB20260120154 and 92 more