CVE-2024-31899: IBM Cognos Command Center

Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days.

IBM Cognos Command Center 10.2.4.1 and 10.2.5 could disclose highly sensitive user information to an authenticated user with physical access to the device.

Affected products

• IBM Cognos Command Center: version 10.2.4.1 only; version 10.2.5 only

Published 2024-09-26. Last modified 2026-06-17.