CVE-2017-1125

Published: Jun 7, 2017Modified: May 13, 2026

3.3

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 1.8 / Impact: 1.4

Source: NVD

Description

IBM Cognos Analytics 10.1 and 10.2 could allow a local user to craft a URL which could confirm the existence of and expose postial contents of a file. IBM X-Force ID: 121340.

Affected (5)

Products: Ibm: Cognos Business Intelligence Server

Ibm

1 product

Cognos Business Intelligence Server

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Ibm Cognos Business Intelligence Server	Version 10.1.1
Ibm Cognos Business Intelligence Server	Version 10.2.0
Ibm Cognos Business Intelligence Server	Version 10.2.1.1
Ibm Cognos Business Intelligence Server	Version 10.2.1
Ibm Cognos Business Intelligence Server	Version 10.2.2