CVE-2013-5443: IBM Cognos Express

Medium severity, CVSS 6.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Cross-site request forgery (CSRF) vulnerability in IBM Cognos Express 9.0 before IFIX 2, 9.5 before IFIX 2, 10.1 before IFIX 2, and 10.2.1 before FP1 allows remote attackers to hijack the authentication of arbitrary users.

Affected products

• IBM Cognos Express: version 9.0 only; version 9.5 only; version 10.1 only; version 10.2.1 only

Published 2014-03-25. Last modified 2026-06-16.