CVE-2025-1494: IBM Cognos Command Center clickjacking
IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim.
Other sources
IBM Cognos Command Center could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim.
— IBM
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-1494?
CVE-2025-1494 is rated as critical due to its potential to allow remote attackers to hijack victim click actions.
How do I fix CVE-2025-1494?
To fix CVE-2025-1494, update your IBM Cognos Command Center to version 10.2.6 or later.
Which versions of IBM Cognos Command Center are affected by CVE-2025-1494?
CVE-2025-1494 affects IBM Cognos Command Center versions 10.2.4.1 and 10.2.5.
What type of attack does CVE-2025-1494 enable?
CVE-2025-1494 enables clickjacking attacks, allowing remote attackers to hijack user actions.
Is there any workaround for CVE-2025-1494?
As of now, there are no official workarounds for CVE-2025-1494; the only mitigation is to update the software.