Skip to content
OpenAdvisories
Medium · 6.1 CVE-2025-1494 EUVD-2025-25814GHSA-vq5f-53c7-2g7m

IBM Cognos Command Center clickjacking

Published Aug 26, 2025 · Updated Aug 26, 2025 · Assigned by ibm

Description

IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim.

Affected products

VendorProductAffectedFixed
IBM Cognos Command Center 10.2.4.1, 10.2.5 —

Advisories 1

References