IBM InfoSphere Information Server XML External Entity Injection (XXE) Vulnerability

IBM InfoSphere Information Server is a data integration platform from International Business Machines (IBM), Inc. The platform can be used to integrate data information obtained from various sources.IBM InfoSphere Information Server version 11.7 contains an XML External Entity Injection (XXE) vulnerability, which stems from vulnerability to XML External Entity Injection (XXE) attacks when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.