CVE-2016-6111

IBM Cúram Social Program Management (SPM) is affected by CVE-2016-6111 due to an XML External Entity Injection (XXE) in XML data processing, causing denial of service with potential data exposure and memory depletion. The IBM Security Bulletin lists affected versions across SPM 5.2 SP6 up to 7.0....