A file inclusion vulnerability in “BIRT Viewer” servlet used in BMC Remedy AR Reporting has been discovered. Versions 8.1 and 9.0 are affected.