Xxe

2013-11-1803:55:00

PRIOn knowledge base

www.prio-n.com

6.6 Medium

AI Score

Confidence

Low

0.009 Low

EPSS

Percentile

83.0%

JSON

IBM Cognos Business Intelligence 8.4.1 before IF3, 10.1.0 before IF4, 10.1.1 before IF4, 10.2.0 before IF4, 10.2.1 before IF2, and 10.2.1.1 before IF1 allows remote authenticated users to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

CPENameOperatorVersion
cognos_business_intelligenceeq10.2.1
cognos_business_intelligenceeq10.2
cognos_business_intelligenceeq10.1.1
cognos_business_intelligenceeq10.2.1.1
cognos_business_intelligenceeq10.1
cognos_business_intelligenceeq8.4.1

Name	Operator	Version
cognos_business_intelligence	eq	10.2.1
cognos_business_intelligence	eq	10.2
cognos_business_intelligence	eq	10.1.1
cognos_business_intelligence	eq	10.2.1.1
cognos_business_intelligence	eq	10.1
cognos_business_intelligence	eq	8.4.1