Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2025-1994

IBM Cognos Command Center code execution

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ibm

Description

IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a local user to execute arbitrary code on the system due to the use of unsafe use of the BinaryFormatter function.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM Cognos Command Center

Default version status: unaffected

  • 10.2.4.1affected
  • 10.2.5affected

References