CVE-2016-9710

2017-06-0717:00:00

ibm

www.cve.org

5.1 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.1%

JSON

IBM Predictive Solutions Foundation (formerly PMQ) could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted URL to specify a file from the local system, which could allow the attacker to obtain sensitive information. IBM X-Force ID: 119618.

CNA Affected

[
  {
    "product": "Cognos Business Intelligence",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "10.1.1"
      },
      {
        "status": "affected",
        "version": "10.2"
      },
      {
        "status": "affected",
        "version": "10.2.1"
      },
      {
        "status": "affected",
        "version": "10.2.1.1"
      },
      {
        "status": "affected",
        "version": "10.2.2"
      }
    ]
  }
]