CVE-2017-1125: IBM Cognos Business Intelligence Server

Low severity, CVSS 3.3. EPSS: 0.3% chance of exploitation in the next 30 days.

IBM Cognos Analytics 10.1 and 10.2 could allow a local user to craft a URL which could confirm the existence of and expose postial contents of a file. IBM X-Force ID: 121340.

Affected products

• IBM Cognos Business Intelligence Server: version 10.1.1 only; version 10.2.0 only; version 10.2.1 only; version 10.2.1.1 only; version 10.2.2 only

Published 2017-06-07. Last modified 2026-06-17.