CVE-2013-5445: IBM Cognos Express

Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days.

IBM Cognos Express 9.0 before IFIX 2, 9.5 before IFIX 2, 10.1 before IFIX 2, and 10.2.1 before FP1 allows local users to obtain sensitive cleartext information by leveraging knowledge of a static decryption key.

Affected products

• IBM Cognos Express: version 9.0 only; version 9.5 only; version 10.1 only; version 10.2.1 only

Published 2014-03-25. Last modified 2026-06-16.