VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 26, 2025· Updated Aug 26, 2025

IBM Cognos Command Center clickjacking

CVE-2025-1494

Description

IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • IBM/Cognos Command Centerv52 versions
    cpe:2.3:a:ibm:cognos_command_center:10.2.4.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:cognos_command_center:10.2.4.1:*:*:*:*:*:*:*range: 10.2.4.1
    • (no CPE)range: =10.2.4.1, =10.2.5

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.