Vulnerabilities > IBM > Cognos Command Center

DATE CVE VULNERABILITY TITLE RISK
2024-09-26 CVE-2024-31899 Insufficiently Protected Credentials vulnerability in IBM Cognos Command Center 10.2.4.1/10.2.5
IBM Cognos Command Center 10.2.4.1 and 10.2.5 could disclose highly sensitive user information to an authenticated user with physical access to the device.
low complexity
ibm CWE-522
4.3
2023-05-05 CVE-2022-38707 Insufficient Session Expiration vulnerability in IBM Cognos Command Center 10.2.4.1
IBM Cognos Command Center 10.2.4.1 could allow a local attacker to obtain sensitive information due to insufficient session expiration.
local
low complexity
ibm CWE-613
5.5