CVE-2022-38707: IBM Cognos Command Center

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

IBM Cognos Command Center 10.2.4.1 could allow a local attacker to obtain sensitive information due to insufficient session expiration. IBM X-Force ID: 234179.

Affected products

• IBM Cognos Command Center: version 10.2.4.1 only

Published 2023-05-05. Last modified 2026-06-17.