CVE-2014-0854

Currently unrated

Key Information:

Vendor
IBM
Status
Cognos Business Intelligence
Vendor
CVE Published:
22 February 2014

Summary

The server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1 before IF6, 10.1.1 before IF5, 10.2 before IF7, 10.2.1 before IF4, and 10.2.1.1 before IF4 allows remote authenticated users to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/90794
vdb-entryx_refsource_XF
http://www-01.ibm.com/support/docview.wss?uid=swg21662856
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.