IBM Cognos Controller XML External Entity Injection Vulnerability (CNVD-2022-66264)

IBM Cognos Controller is a suite of business intelligence and planning solutions from IBM Corporation. The product has features such as process automation, financial audit control, and creation and management of financial reports.IBM Cognos Controller has an XML external entity injection vulnerability that can be exploited by attackers to obtain sensitive information or consume memory resources.