VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Aug 26, 2025· Updated Jun 17, 2026

CVE-2025-1494

CVE-2025-1494

Description

IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • IBM/Cognos Command Centerllm-fuzzy3 versions
    10.2.4.1, 10.2.5+ 2 more
    • (no CPE)range: 10.2.4.1, 10.2.5
    • cpe:2.3:a:ibm:cognos_command_center:10.2.4.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:cognos_command_center:10.2.5:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.