CVE-2025-1994

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

IBM Cognos Command Center 10.2.4.1 and 10.2.5

could allow a local user to execute arbitrary code on the system due to the use of unsafe use of the BinaryFormatter function.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-242

Affected software

No affected versions have been published.

Timeline

Published
Aug 26, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-19974.6IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.25, 7.1 through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 through 7.3.2.0 / IBM DevOps Deploy 8.0CVE-2025-19985.5IBM UrbanCode Deploy (UCD) through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 through 7.3.2.0 / IBM DevOps Deploy 8.0 through 8.0.1.4 and 8.1 tCVE-2025-20009.8A maliciously crafted QPY file can potential execute arbitrary-code embedded in the payload without privilege escalation when deserialising CVE-2025-200016.5An out-of-bounds read vulnerability exists in High-Logic FontCreator 15.0.0.3015. A specially crafted font file can trigger this vulnerabiliCVE-2025-200025.3After attempting to upload a file that does not meet prerequisites, GMOD Apollo will respond with local path information disclosureCVE-2025-200038.2Improper link resolution before file access ('Link Following') for some Intel(R) Graphics Driver software installers may allow an authenticaCVE-2025-200047.2Insufficient control flow management in the Alias Checking Trusted Module for some Intel(R) Xeon(R) 6 processor E-Cores firmware may allow aCVE-2025-200055.7Improper buffer restrictions in some UEFI firmware for some Intel(R) reference platforms may allow an escalation of privilege. System softwaCVE-2025-200067.4Use after free for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentCVE-2025-200087.7Insecure inherited permissions for some Intel(R) Simics(R) Package Manager software before version 1.12.0 may allow a privileged user to potCVE-2025-200094.1Improper input validation in the UEFI firmware GenerationSetup module for the Intel(R) Server D50DNP and M50FCP boards may allow a privilegeCVE-2025-200107.8Use of unmaintained third party components for some Intel(R) Processor Identification Utility before version 8.0.43 within Ring 3: User Appl
CVE-2025-1994: High severity, CVSS 7.8 | Vulnix