IBM Cognos Business Intelligence Server vulnerabilities

2 CVEs affecting IBM Cognos Business Intelligence Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-1125, published 2017-06-07.

More from IBM.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2016-9710, published 2017-06-07. Medium severity, CVSS 5.3. EPSS: 1.6% chance of exploitation in the next 30 days. IBM Predictive Solutions Foundation (formerly PMQ) could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted URL to specify a file from the local…
• CVE-2017-1125, published 2017-06-07. Low severity, CVSS 3.3. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Cognos Analytics 10.1 and 10.2 could allow a local user to craft a URL which could confirm the existence of and expose postial contents of a file. IBM X-Force ID: 121340.