CVE-2025-2697: IBM Cognos Command Center HTTP Open Redirect
IBM Cognos Command Center 10.2.4.1 and 10.2.5
could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim.
Other sources
IBM Cognos Command Center could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim.
— IBM
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-2697?
CVE-2025-2697 is classified as a high-severity vulnerability due to its potential to facilitate phishing attacks.
How do I fix CVE-2025-2697?
To mitigate CVE-2025-2697, upgrade to IBM Cognos Command Center version 10.2.6 or later.
What types of attacks can CVE-2025-2697 be exploited for?
CVE-2025-2697 can be exploited to conduct phishing attacks through open redirect vulnerabilities.
Which versions of IBM Cognos Command Center are affected by CVE-2025-2697?
CVE-2025-2697 affects IBM Cognos Command Center versions 10.2.4.1 and 10.2.5.
Who can be targeted by vulnerabilities like CVE-2025-2697?
Victims targeted by vulnerabilities like CVE-2025-2697 may include users who unknowingly visit crafted websites in phishing attempts.