CVE-2014-4810

no score yetEPSS 1.1%

ibm cognos mobile: no CVSS score yet. EPSS 1.1% chance of exploitation in the next 30 days.

IBM Cognos Mobile 10.1.1 before FP3 IF1, 10.2.0 before FP2 IF1, and 10.2.1 before FP4 IF1 preserves a session between the Cognos Mobile server and the Cognos Business Intelligence server after a logoff action on a mobile device, which makes it easier for remote attackers to bypass intended Business Intelligence restrictions by leveraging access to authentication data that was captured before this logoff.

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 66% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2014-11-05
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:cognos_mobile

References

http://www-01.ibm.com/support/docview.wss?uid=swg21684608
https://exchange.xforce.ibmcloud.com/vulnerabilities/95386
http://www-01.ibm.com/support/docview.wss?uid=swg21684608
https://exchange.xforce.ibmcloud.com/vulnerabilities/95386

Check your stack JSON