Xxe

2017-06-0717:29:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

56.6%

JSON

IBM Cognos Business Intelligence 10.1 and 10.2 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote authenticated attacker could exploit this vulnerability to consume all available CPU resources and cause a denial of service. IBM X-Force ID: 110563.

CPENameOperatorVersion
cognos_business_intelligenceeq10.2.1
cognos_business_intelligenceeq10.2
cognos_business_intelligenceeq10.1.1
cognos_business_intelligenceeq10.2.1.1
cognos_business_intelligenceeq10.2.2

Name	Operator	Version
cognos_business_intelligence	eq	10.2.1
cognos_business_intelligence	eq	10.2
cognos_business_intelligence	eq	10.1.1
cognos_business_intelligence	eq	10.2.1.1
cognos_business_intelligence	eq	10.2.2