Open Redirect Vulnerability in IBM Cognos Command Center
CVE-2025-2697

7.4HIGH

Key Information:

Vendor

IBM
Status
Cognos Command Center
Vendor
CVE Published:
26 August 2025

What is CVE-2025-2697?

The vulnerability in IBM Cognos Command Center versions 10.2.4.1 and 10.2.5 may permit remote attackers to launch phishing attacks by exploiting an open redirect flaw. This allows attackers to craft deceptive URLs that mislead users into believing they're visiting a trusted site. As a result, victims may unknowingly divulge sensitive information or fall prey to additional attacks. It is crucial for users of affected versions to apply patches and mitigate potential risks.

Affected Version(s)

Cognos Command Center 10.2.4.1

Cognos Command Center 10.2.5

References

https://www.ibm.com/support/pages/node/7242159
vendor-advisorypatch

CVSS V3.1

Score:
7.4
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-2697 : Open Redirect Vulnerability in IBM Cognos Command Center