CVE-2016-8960: IBM Cognos Business Intelligence

High severity, CVSS 8.8. EPSS: 1.5% chance of exploitation in the next 30 days.

IBM Cognos Business Intelligence 10.2 could allow a user with lower privilege Capabilities to adopt the Capabilities of a higher-privilege user by intercepting the higher-privilege user's cookie value from its HTTP request and then reusing it in subsequent requests. IBM Reference #: 1993718.

Affected products

• IBM Cognos Business Intelligence: version 10.2 only; version 10.2.1 only; version 10.2.1.1 only; version 10.2.2 only

Published 2017-03-27. Last modified 2026-06-17.