{"affected":[{"product":"Cognos Command Center","source":"CNA: ibm","vendor":"IBM","versions":[{"status":"affected","version":"10.2.4.1"},{"status":"affected","version":"10.2.5"}]}],"cveId":"CVE-2026-14963","cwes":["CWE-352"],"description":"IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a remote attacker to execute unauthorized processes due to cross-site request forgery.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":4.3,"severity":"medium","source":"CNA: ibm","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","version":"3.1"}],"modifiedAt":1794159232723,"publishedAt":1794159217054,"references":[{"source":"CNA: ibm","tags":["vendor-advisory","patch"],"url":"https://www.ibm.com/support/pages/node/7290010"}],"remediation":[{"kind":"fix","source":"CNA: ibm","text":"IBM strongly recommends addressing the vulnerability now by upgrading.\n\nAffected Product(s)VersionFixIBM Cognos Command Center10.2.5 - 10.2.5 FP1 IF4 IBM® Cognos® Command Center® 10.2.5 FP1 IF5 available for download https://www.ibm.com/support/pages/node/7289948 IBM Cognos Command Center10.2.4.1 - 10.2.4.1 IF19 IBM® Cognos® Command Center® 10.2.5 FP1 IF5 available for download https://www.ibm.com/support/pages/node/7289948 \n\n\n\n\n\n\n\nIBM Cognos Command Center Cloud environments have been updated."},{"kind":"fix","source":"CNA: ibm","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://www.ibm.com/support/pages/node/7290010"}],"revision":"ee63e0a80fb4e4393b30c2f35e40dc68354f55c4cc8cfea3df59fda70849c25e","sources":[{"modifiedAt":1794159232723,"name":"CNA: ibm","retrievedAt":1794161329154,"url":"https://www.cve.org/CVERecord?id=CVE-2026-14963"}],"ssvc":null,"status":"published","title":"IBM Cognos Command Center has addressed vulnerabilities","updatedAt":1794161329154}