CVE-2026-14963: IBM Cognos Command Center has addressed vulnerabilities

Q: Which deployments are identified as affected?

IBM Cognos Command Center versions 10.2.4.1 and 10.2.5 are identified as allowing unauthorized process execution through cross-site request forgery.

Q: What must an attacker do to exploit this issue?

The attack is remote and requires no privileges, but it requires user interaction. The vulnerability is a cross-site request forgery issue, meaning exploitation depends on causing a user to submit a forged request.

Q: What is the potential impact of successful exploitation?

A successful attacker could execute unauthorized processes. The listed impact affects integrity, with no confidentiality or availability impact indicated.

Published Oct 15, 2026

Updated

IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a remote attacker to execute unauthorized processes due to cross-site request forgery.

Other sources

IBM Cognos Command Center could allow a remote attacker to execute unauthorized processes due to cross-site request forgery.

— IBM

Affected Software

2 affected components

IBM Cognos Command Center<=10.2.4.1

IBM Cognos Command Center<=10.2.5

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade IBM Cognos Command Center to a version that resolves this vulnerability.
Fixed in 10.2.5 FP1 IF5

Event History

Oct 15, 2026

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionAffected Software

Nov 8, 2026

CVE Published

via MITRE·05:33 PM

Data Sourced

via MITRE·05:33 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·06:17 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-7290010

Frequently Asked Questions

Which deployments are identified as affected?

IBM Cognos Command Center versions 10.2.4.1 and 10.2.5 are identified as allowing unauthorized process execution through cross-site request forgery.

What must an attacker do to exploit this issue?

The attack is remote and requires no privileges, but it requires user interaction. The vulnerability is a cross-site request forgery issue, meaning exploitation depends on causing a user to submit a forged request.

What is the potential impact of successful exploitation?

A successful attacker could execute unauthorized processes. The listed impact affects integrity, with no confidentiality or availability impact indicated.

CVE-2026-14963: IBM Cognos Command Center has addressed vulnerabilities

Other sources

Affected Software

Remediation

Event History

Parent advisories

Frequently Asked Questions

Which deployments are identified as affected?

What must an attacker do to exploit this issue?

What is the potential impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are identified as affected?

What must an attacker do to exploit this issue?

What is the potential impact of successful exploitation?