CVE-2013-4034: IBM Cognos Business Intelligence

Medium severity, CVSS 4.0. EPSS: 5.6% chance of exploitation in the next 30 days.

IBM Cognos Business Intelligence 8.4.1 before IF3, 10.1.0 before IF4, 10.1.1 before IF4, 10.2.0 before IF4, 10.2.1 before IF2, and 10.2.1.1 before IF1 allows remote authenticated users to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

Affected products

• IBM Cognos Business Intelligence: version 8.4.1 only; version 10.1 only; version 10.1.1 only; version 10.2 only; version 10.2.1 only; version 10.2.1.1 only

Published 2013-11-18. Last modified 2026-06-16.