CVE-2026-14963 PUBLISHED

IBM Cognos Command Center has addressed vulnerabilities

Assigner: ibm
Reserved: 07.07.2026 Published: 08.11.2026 Updated: 08.11.2026

IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a remote attacker to execute unauthorized processes due to cross-site request forgery.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
CVSS Score: 4.3

Product Status

Vendor IBM
Product Cognos Command Center
Versions
  • Version 10.2.4.1 is affected
  • Version 10.2.5 is affected

Solutions

IBM strongly recommends addressing the vulnerability now by upgrading.

Affected Product(s)VersionFixIBM Cognos Command Center10.2.5 - 10.2.5 FP1 IF4 IBM® Cognos® Command Center® 10.2.5 FP1 IF5 available for download https://www.ibm.com/support/pages/node/7289948 IBM Cognos Command Center10.2.4.1 - 10.2.4.1 IF19 IBM® Cognos® Command Center® 10.2.5 FP1 IF5 available for download https://www.ibm.com/support/pages/node/7289948

IBM Cognos Command Center Cloud environments have been updated.

References

Problem Types

  • CWE-352 Cross-Site Request Forgery (CSRF) CWE