CVE-2012-4837

Published: Mar 5, 2013Modified: Apr 29, 2026

4.0

Vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Exploitability: 8.0 / Impact: 2.9

Source: NVD

Description

IBM Cognos Business Intelligence (BI) 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 allows remote authenticated users to conduct XPath injection attacks, and read arbitrary XML files, via unspecified vectors.

Affected (4)

Products: Ibm: Cognos Business Intelligence

Ibm

1 product

Cognos Business Intelligence

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Ibm Cognos Business Intelligence	Version 10.1.1
Ibm Cognos Business Intelligence	Version 10.1
Ibm Cognos Business Intelligence	Version 10.2
Ibm Cognos Business Intelligence	Version 8.4.1