A file inclusion vulnerability in the “BIRT Engine” servlet used in BMC Remedy AR Reporting has been discovered. Versions 8.1 and 9.0 are affected.