CVE-2016-9710: IBM Predictive Solutions Foundation (formerly PMQ) could allow a remote attacker to include arbitrary files.

Security readout for executives and security teams

This issue could let a remote attacker make affected IBM Cognos deployments reveal files from the server. The sources describe potential sensitive information exposure, but do not provide CVSS scoring, public exploitation evidence, or detailed remediation text in the bundle. Exposure is most likely where IBM Cognos Business Intelligence 10.1.1, 10.2, 10.2.1, 10.2.1.1, or 10.2.2 includes the affected Predictive Solutions Foundation component and is reachable by untrusted users. Treat this as a targeted information-disclosure risk for legacy IBM analytics systems. Prioritize asset discovery and vendor-guided remediation, especially for externally reachable or sensitive-data environments. Mitigation focus: Check IBM advisory swg22004036 for official fixes and supported upgrade paths.; Inventory affected IBM Cognos Business Intelligence 10.x deployments.; Limit access to Cognos interfaces to trusted users and networks while assessing exposure..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.