CVE-2016-9985: IBM Cognos Business Intelligence

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

IBM Cognos Server 10.1.1 and 10.2 stores highly sensitive information in log files that could be read by a local user. IBM Reference #: 1999671.

Affected products

• IBM Cognos Business Intelligence: version 10.1.1 only; version 10.2 only

Published 2017-03-08. Last modified 2026-06-17.