cbcvebase.
CVE-2013-4034
published 2013-11-18

CVE-2013-4034: IBM Cognos Business Intelligence 8.4.1 before IF3, 10.1.0 before IF4, 10.1.1 before IF4, 10.2.0 before IF4, 10.2.1 before IF2, and 10.2.1.1 before IF1 allows…

PriorityP432medium4CVSS 2.0
AVNACLAuSCPINAN
EXPLOIT
EPSS
5.56%
91.9th percentile
IBM Cognos Business Intelligence 8.4.1 before IF3, 10.1.0 before IF4, 10.1.1 before IF4, 10.2.0 before IF4, 10.2.1 before IF2, and 10.2.1.1 before IF1 allows remote authenticated users to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

Affected

6 ranges
VendorProductVersion rangeFixed in
ibmcognos_business_intelligence——
ibmcognos_business_intelligence——
ibmcognos_business_intelligence——
ibmcognos_business_intelligence——
ibmcognos_business_intelligence——
ibmcognos_business_intelligence——
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.